Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRole
- metadata:
- namespace: monitoring
- name: manage-monitoring
- rules:
- - apiGroups: ["", "extensions", "apps"]
- resources: ["deployments", "pods", "secrets", "nodes", "statefulsets", "services", "daemonsets", "configmaps"]
- verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- - apiGroups: ["batch"]
- resources: ["cronjobs"]
- verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- - apiGroups: [""]
- resources: ["pods", "pods/log"]
- verbs: ["get", "list"]
- - apiGroups: [""]
- resources: ["pods/exec"]
- verbs: ["create"]
- ---
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRoleBinding
- metadata:
- name: manage-monitoring-global
- roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: manage-monitoring
- subjects:
- - kind: ServiceAccount
- name: kubernetes-dashboard
- namespace: kube-system
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement