Permalink
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
32 lines (31 sloc) 693 Bytes
apiVersion: v1
kind: ServiceAccount
metadata:
name: user-service-account
namespace: default
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: user-privilege-role
rules:
- apiGroups: ["*"]
resources: ["cstorvolumes", "events"]
verbs: ["*"]
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: user-service-account
namespace: default
subjects:
- kind: ServiceAccount
name: user-service-account
namespace: default
- apiGroup: rbac.authorization.k8s.io
kind: User
name: system:serviceaccount:default:default
roleRef:
kind: ClusterRole
name: user-privilege-role
apiGroup: rbac.authorization.k8s.io