k8s.io/kubernetes@v1.31.0-alpha.0.0.20240520171757-56147500dadc/test/kubemark/resources/manifests/addons/kubemark-rbac-bindings/kubelet-binding.yaml (about)

     1  # The Kubemark environment currently gives all kubelets a single shared credential.
     2  #
     3  # TODO: give each kubelet a credential in the system:nodes group with username system:node:<nodeName>,
     4  # to exercise the Node authorizer and admission, then remove this binding
     5  apiVersion: rbac.authorization.k8s.io/v1
     6  kind: ClusterRoleBinding
     7  metadata:
     8    name: kubelet-node
     9    labels:
    10      kubernetes.io/cluster-service: "true"
    11  roleRef:
    12    apiGroup: rbac.authorization.k8s.io
    13    kind: ClusterRole
    14    name: system:node
    15  subjects:
    16  - apiGroup: rbac.authorization.k8s.io
    17    kind: User
    18    name: kubelet