k8s.io/kubernetes@v1.31.0-alpha.0.0.20240520171757-56147500dadc/test/e2e/testing-manifests/storage-csi/hostpath/hostpath/e2e-test-rbac.yaml (about)

     1  # privileged Pod Security Policy, previously defined just for gcePD via PrivilegedTestPSPClusterRoleBinding()
     2  kind: ClusterRoleBinding
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  metadata:
     5    name: psp-csi-hostpath-role
     6  subjects:
     7    # This list of ServiceAccount intentionally covers everything that might
     8    # be needed. In practice, only some of these accounts are actually
     9    # used.
    10    - kind: ServiceAccount
    11      name: csi-attacher
    12      namespace: default
    13    - kind: ServiceAccount
    14      name: csi-provisioner
    15      namespace: default
    16    - kind: ServiceAccount
    17      name: csi-snapshotter
    18      namespace: default
    19    - kind: ServiceAccount
    20      name: csi-resizer
    21      namespace: default
    22    - kind: ServiceAccount
    23      name: csi-external-health-monitor-controller
    24      namespace: default
    25    - kind: ServiceAccount
    26      name: csi-hostpathplugin-sa
    27      namespace: default
    28  roleRef:
    29    kind: ClusterRole
    30    name: e2e-test-privileged-psp
    31    apiGroup: rbac.authorization.k8s.io