Skip to content

Instantly share code, notes, and snippets.

@ipedrazas
Created October 29, 2018 12:15
Show Gist options
  • Save ipedrazas/5b1ab080fec518b89e86b50277a2de57 to your computer and use it in GitHub Desktop.
Save ipedrazas/5b1ab080fec518b89e86b50277a2de57 to your computer and use it in GitHub Desktop.
NS rbac
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: mynamespace-user
namespace: mynamespace
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: mynamespace-user-full-access
namespace: mynamespace
rules:
- apiGroups: ["", "extensions", "apps"]
resources: ["*"]
verbs: ["*"]
- apiGroups: ["batch"]
resources:
- jobs
- cronjobs
verbs: ["*"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: mynamespace-user-view
namespace: mynamespace
subjects:
- kind: ServiceAccount
name: mynamespace-user
namespace: mynamespace
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: mynamespace-user-full-access
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment