sigs.k8s.io/kubebuilder/v3@v3.14.0/pkg/plugins/common/kustomize/v1/scaffolds/internal/templates/config/rbac/kustomization.go (about)

     1  /*
     2  Copyright 2020 The Kubernetes Authors.
     3  
     4  Licensed under the Apache License, Version 2.0 (the "License");
     5  you may not use this file except in compliance with the License.
     6  You may obtain a copy of the License at
     7  
     8      http://www.apache.org/licenses/LICENSE-2.0
     9  
    10  Unless required by applicable law or agreed to in writing, software
    11  distributed under the License is distributed on an "AS IS" BASIS,
    12  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    13  See the License for the specific language governing permissions and
    14  limitations under the License.
    15  */
    16  
    17  package rbac
    18  
    19  import (
    20  	"path/filepath"
    21  
    22  	"sigs.k8s.io/kubebuilder/v3/pkg/machinery"
    23  )
    24  
    25  var _ machinery.Template = &Kustomization{}
    26  
    27  // Kustomization scaffolds a file that defines the kustomization scheme for the rbac folder
    28  type Kustomization struct {
    29  	machinery.TemplateMixin
    30  }
    31  
    32  // SetTemplateDefaults implements file.Template
    33  func (f *Kustomization) SetTemplateDefaults() error {
    34  	if f.Path == "" {
    35  		f.Path = filepath.Join("config", "rbac", "kustomization.yaml")
    36  	}
    37  
    38  	f.TemplateBody = kustomizeRBACTemplate
    39  
    40  	f.IfExistsAction = machinery.Error
    41  
    42  	return nil
    43  }
    44  
    45  const kustomizeRBACTemplate = `resources:
    46  # All RBAC will be applied under this service account in
    47  # the deployment namespace. You may comment out this resource
    48  # if your manager will use a service account that exists at
    49  # runtime. Be sure to update RoleBinding and ClusterRoleBinding
    50  # subjects if changing service account names.
    51  - service_account.yaml
    52  - role.yaml
    53  - role_binding.yaml
    54  - leader_election_role.yaml
    55  - leader_election_role_binding.yaml
    56  # Comment the following 4 lines if you want to disable
    57  # the auth proxy (https://github.com/brancz/kube-rbac-proxy)
    58  # which protects your /metrics endpoint.
    59  - auth_proxy_service.yaml
    60  - auth_proxy_role.yaml
    61  - auth_proxy_role_binding.yaml
    62  - auth_proxy_client_clusterrole.yaml
    63  `