Skip to content

Instantly share code, notes, and snippets.

@mgoodness
Created October 13, 2017 20:37
Show Gist options
  • Save mgoodness/15938d0bb77e715de896c833a24cbe9d to your computer and use it in GitHub Desktop.
Save mgoodness/15938d0bb77e715de896c833a24cbe9d to your computer and use it in GitHub Desktop.
Minimal RBAC to enable `kubectl top`
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role
metadata:
name: heapster-user
rules:
- apiGroups:
- ""
resourceNames:
- "http:heapster:"
resources:
- services/proxy
verbs:
- get
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
name: heapster-user
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: heapster-user
subjects:
- kind: Group
name: AWS-All
...
@robdewit
Copy link

👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment