summaryrefslogtreecommitdiffstats
path: root/kud/demo/composite-firewall/sink/templates/rolebinding.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'kud/demo/composite-firewall/sink/templates/rolebinding.yaml')
-rw-r--r--kud/demo/composite-firewall/sink/templates/rolebinding.yaml14
1 files changed, 14 insertions, 0 deletions
diff --git a/kud/demo/composite-firewall/sink/templates/rolebinding.yaml b/kud/demo/composite-firewall/sink/templates/rolebinding.yaml
new file mode 100644
index 00000000..14c5b758
--- /dev/null
+++ b/kud/demo/composite-firewall/sink/templates/rolebinding.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.rbac.create }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+ name: {{ include "sink.fullname" . }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: psp:privileged
+subjects:
+- kind: ServiceAccount
+ name: {{ include "sink.serviceAccountName" . }}
+ namespace: {{ $.Release.Namespace }}
+{{- end }}