Merge pull request #1016 from titilambert/master

Add missing SA for dns internal check
kuberhealthy · Feb 25, 2022 · 38ead7d · 38ead7d
2 parents 6cd93c1 + 1b7cae3
commit 38ead7d
Showing 1 changed file with 33 additions and 0 deletions.
diff --git a/deploy/helm/kuberhealthy/templates/khcheck-dns-internal.yaml b/deploy/helm/kuberhealthy/templates/khcheck-dns-internal.yaml
@@ -57,4 +57,37 @@ spec:
     tolerations:
 {{- toYaml .Values.check.dnsInternal.tolerations | nindent 6 }}
     {{- end }}
+    serviceAccountName: dns-internal-sa
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: dns-internal-check-rb
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: dns-internal-service-role
+subjects:
+  - kind: ServiceAccount
+    name: dns-internal-sa
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: dns-internal-service-role
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - nodes
+    verbs:
+      - get
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: dns-internal-sa
+  namespace: {{ .Release.Namespace }}
 {{- end }}