aboutsummaryrefslogtreecommitdiffstats
path: root/roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2
diff options
context:
space:
mode:
authorAndreas Geissler <andreas-geissler@telekom.de>2022-10-19 17:49:04 +0200
committerAndreas Geissler <andreas-geissler@telekom.de>2022-10-19 17:52:13 +0200
commitd273edeccd97122de1caec74243d702a652cacb9 (patch)
tree4414e752f4a6aebc6fa29ef79b36d9b5f5571858 /roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2
parented3c78887493baa5855ac5256683b68ab7b74073 (diff)
[GITLAB] Initial content for gitlab project xtesting-onap
Issue-ID: INT-2150 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: I6a429e2f661474fe54b13b6513eca64f13e99b50
Diffstat (limited to 'roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2')
-rw-r--r--roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j249
1 files changed, 49 insertions, 0 deletions
diff --git a/roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2 b/roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2
new file mode 100644
index 0000000..e240b5e
--- /dev/null
+++ b/roles/onap-chaos-tests/templates/node-cpu-hog-rbac.yaml.j2
@@ -0,0 +1,49 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: node-cpu-hog-sa
+ namespace: {{ onap_namespace }}
+ labels:
+ name: node-cpu-hog-sa
+ app.kubernetes.io/part-of: litmus
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+ name: node-cpu-hog-sa
+ labels:
+ name: node-cpu-hog-sa
+ app.kubernetes.io/part-of: litmus
+rules:
+- apiGroups: [""]
+ resources: ["pods","events"]
+ verbs: ["create","list","get","patch","update","delete","deletecollection"]
+- apiGroups: [""]
+ resources: ["pods/exec","pods/log"]
+ verbs: ["list","get","create"]
+- apiGroups: ["batch"]
+ resources: ["jobs"]
+ verbs: ["create","list","get","delete","deletecollection"]
+- apiGroups: ["litmuschaos.io"]
+ resources: ["chaosengines","chaosexperiments","chaosresults"]
+ verbs: ["create","list","get","patch","update"]
+- apiGroups: [""]
+ resources: ["nodes"]
+ verbs: ["get","list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: node-cpu-hog-sa
+ labels:
+ name: node-cpu-hog-sa
+ app.kubernetes.io/part-of: litmus
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: node-cpu-hog-sa
+subjects:
+- kind: ServiceAccount
+ name: node-cpu-hog-sa
+ namespace: {{ onap_namespace }} \ No newline at end of file