github.phpd.cn/cilium/cilium@v1.6.12/test/k8sT/manifests/microscope.yaml (about) 1 kind: ClusterRoleBinding 2 apiVersion: rbac.authorization.k8s.io/v1beta1 3 metadata: 4 name: microscope 5 roleRef: 6 apiGroup: rbac.authorization.k8s.io 7 kind: ClusterRole 8 name: microscope 9 subjects: 10 - kind: ServiceAccount 11 name: microscope 12 namespace: kube-system 13 --- 14 kind: ClusterRole 15 apiVersion: rbac.authorization.k8s.io/v1beta1 16 metadata: 17 name: microscope 18 rules: 19 - apiGroups: 20 - "" 21 resources: 22 - pods 23 - namespaces 24 - nodes 25 verbs: 26 - get 27 - list 28 - apiGroups: 29 - "" 30 resources: 31 - pods/exec 32 verbs: 33 - create 34 - get 35 - apiGroups: 36 - cilium.io 37 resources: 38 - ciliumnetworkpolicies 39 - ciliumendpoints 40 verbs: 41 - get 42 - list 43 - watch 44 - apiGroups: 45 - networking.k8s.io 46 resources: 47 - networkpolicies 48 verbs: 49 - get 50 - list 51 - watch 52 --- 53 apiVersion: v1 54 kind: ServiceAccount 55 metadata: 56 name: microscope 57 namespace: kube-system 58 --- 59 apiVersion: v1 60 kind: Pod 61 metadata: 62 name: microscope 63 namespace: kube-system 64 labels: 65 k8s-app: microscope 66 spec: 67 serviceAccountName: microscope 68 terminationGracePeriodSeconds: 0 69 containers: 70 - args: 71 - sleep 72 - "100000" 73 image: docker.io/cilium/microscope:1.1.2-ci 74 imagePullPolicy: IfNotPresent 75 name: microscope 76 readinessProbe: 77 exec: 78 command: 79 - microscope 80 - --send-command 81 - "'echo test'" 82 - --timeout-monitors 83 - "2" 84 initialDelaySeconds: 0 85 periodSeconds: 5 86 timeoutSeconds: 3