also create ServiceAccount and RoleBinding

pan-net-security · May 17, 2022 · 3be4eac · 3be4eac
1 parent f8e0c91
commit 3be4eac
Showing 1 changed file with 18 additions and 1 deletion.
diff --git a/k8s-example.yaml b/k8s-example.yaml
@@ -11,6 +11,23 @@ spec:
       port: 80
       targetPort: 2112
 ---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kcount
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: kcount-view
+subjects:
+- kind: ServiceAccount
+  name: kcount
+roleRef:
+  kind: ClusterRole
+  name: view # one of the predefined ClusterRoles
+  apiGroup: rbac.authorization.k8s.io
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -37,4 +54,4 @@ spec:
         args:
           - -a
           - -d
-      serviceAccountName: default # CHANGEME
+      serviceAccountName: kcount