Skip to content

Instantly share code, notes, and snippets.

@bh7cw
Last active July 12, 2021 21:41
Show Gist options
  • Save bh7cw/a5ea6e609c574e44271d51a2756efc6b to your computer and use it in GitHub Desktop.
Save bh7cw/a5ea6e609c574e44271d51a2756efc6b to your computer and use it in GitHub Desktop.
OSD-7442
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: sre-1270-rebalancing-infra-nodes
namespace: openshift-monitoring
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: sre-1270-rebalancing-infra-nodes
rules:
- apiGroups:
- ""
resources:
- nodes
verbs:
- list
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: sre-1270-rebalancing-infra-node
subjects:
- kind: ServiceAccount
name: sre-1270-rebalancing-infra-nodes
namespace: openshift-monitoring
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: sre-1270-rebalancing-infra-nodes
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: sre-1270-rebalancing-infra-nodes-openshift-monitoring
namespace: openshift-monitoring
rules:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- delete
- apiGroups:
- ""
resources:
- pvcs
verbs:
- delete
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: sre-1270-rebalancing-infra-nodes-openshift-monitoring
namespace: openshift-monitoring
subjects:
- kind: ServiceAccount
name: sre-1270-rebalancing-infra-nodes
namespace: openshift-monitoring
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: sre-1270-rebalancing-infra-nodes-openshift-monitoring
namespace: openshift-monitoring
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: sre-1270-rebalancing-infra-nodes-openshift-security
namespace: openshift-security
rules:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- delete
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: sre-1270-rebalancing-infra-nodes-openshift-security
namespace: openshift-security
subjects:
- kind: ServiceAccount
name: sre-1270-rebalancing-infra-nodes
namespace: openshift-monitoring
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: sre-1270-rebalancing-infra-nodes-openshift-security
namespace: openshift-security
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment