Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRole
- metadata:
- name: privileged-role
- rules:
- - apiGroups: [""]
- resources: ["secrets", "pods", "pods/log", "services"]
- verbs: ["get", "watch", "list", "create", "delete"]
- - apiGroups: ["batch"]
- resources: ["jobs"]
- verbs: ["get", "watch", "list", "create", "delete"]
- - apiGroups: ["apps"]
- resources: ["deployments"]
- verbs: ["get", "watch", "list", "create", "delete"]
- - apiGroups: ["extensions"]
- resources: ["deployments"]
- verbs: ["get", "watch", "list", "create", "delete"]
- ---
- kind: ClusterRoleBinding
- apiVersion: rbac.authorization.k8s.io/v1
- metadata:
- name: privileged-role-binding
- subjects:
- - kind: ServiceAccount
- name: default
- namespace: kubeflow
- roleRef:
- kind: ClusterRole
- name: privileged-role
- apiGroup: rbac.authorization.k8s.io
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement