Skip to content

Commit 639c594

Browse files
author
wlanboy
committed
swtiched to rolebinding
1 parent 1794d6e commit 639c594

1 file changed

Lines changed: 8 additions & 6 deletions

File tree

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,27 +1,29 @@
11
apiVersion: rbac.authorization.k8s.io/v1
2-
kind: ClusterRole
2+
kind: Role
33
metadata:
44
name: {{ .Values.deploymentname }}-diagnostic-role
5+
namespace: {{ .Release.Namespace }}
56
rules:
67
# Standard Ressourcen für den Kontext
78
- apiGroups: [""]
8-
resources: ["pods", "namespaces", "services", "endpoints"]
9+
resources: ["pods", "services", "endpoints"]
910
verbs: ["get", "list", "watch"]
10-
11+
1112
# Istio spezifische Ressourcen für die Netzwerkanalyse
1213
- apiGroups: ["networking.istio.io"]
1314
resources: ["virtualservices", "destinationrules", "sidecars", "gateways"]
1415
verbs: ["get", "list", "watch"]
1516
---
1617
apiVersion: rbac.authorization.k8s.io/v1
17-
kind: ClusterRoleBinding
18+
kind: RoleBinding
1819
metadata:
1920
name: {{ .Values.deploymentname }}-diagnostic-binding
21+
namespace: {{ .Release.Namespace }}
2022
subjects:
2123
- kind: ServiceAccount
2224
name: {{ .Values.deploymentname }}-sa
2325
namespace: {{ .Release.Namespace }}
2426
roleRef:
25-
kind: ClusterRole
27+
kind: Role
2628
name: {{ .Values.deploymentname }}-diagnostic-role
27-
apiGroup: rbac.authorization.k8s.io
29+
apiGroup: rbac.authorization.k8s.io

0 commit comments

Comments
 (0)