github.com/nginxinc/kubernetes-ingress@v1.12.5/deployments/rbac/rbac.yaml (about)

     1  kind: ClusterRole
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  metadata:
     4    name: nginx-ingress
     5  rules:
     6  - apiGroups:
     7    - ""
     8    resources:
     9    - services
    10    - endpoints
    11    verbs:
    12    - get
    13    - list
    14    - watch
    15  - apiGroups:
    16    - ""
    17    resources:
    18    - secrets
    19    verbs:
    20    - get
    21    - list
    22    - watch
    23  - apiGroups:
    24    - ""
    25    resources:
    26    - configmaps
    27    verbs:
    28    - get
    29    - list
    30    - watch
    31    - update
    32    - create
    33  - apiGroups:
    34    - ""
    35    resources:
    36    - pods
    37    verbs:
    38    - list
    39    - watch
    40  - apiGroups:
    41    - ""
    42    resources:
    43    - events
    44    verbs:
    45    - create
    46    - patch
    47    - list
    48  - apiGroups:
    49    - networking.k8s.io
    50    resources:
    51    - ingresses
    52    verbs:
    53    - list
    54    - watch
    55    - get
    56  - apiGroups:
    57    - networking.k8s.io
    58    resources:
    59    - ingresses/status
    60    verbs:
    61    - update
    62  - apiGroups:
    63    - k8s.nginx.org
    64    resources:
    65    - virtualservers
    66    - virtualserverroutes
    67    - globalconfigurations
    68    - transportservers
    69    - policies
    70    verbs:
    71    - list
    72    - watch
    73    - get
    74  - apiGroups:
    75    - k8s.nginx.org
    76    resources:
    77    - virtualservers/status
    78    - virtualserverroutes/status
    79    - policies/status
    80    - transportservers/status
    81    verbs:
    82    - update
    83  - apiGroups:
    84    - networking.k8s.io
    85    resources:
    86    - ingressclasses
    87    verbs:
    88    - get
    89  - apiGroups:
    90      - cis.f5.com
    91    resources:
    92      - ingresslinks
    93    verbs:
    94      - list
    95      - watch
    96      - get
    97  ---
    98  kind: ClusterRoleBinding
    99  apiVersion: rbac.authorization.k8s.io/v1
   100  metadata:
   101    name: nginx-ingress
   102  subjects:
   103  - kind: ServiceAccount
   104    name: nginx-ingress
   105    namespace: nginx-ingress
   106  roleRef:
   107    kind: ClusterRole
   108    name: nginx-ingress
   109    apiGroup: rbac.authorization.k8s.io