titan-iac/services/maintenance/pi-usb-scratch-rbac.yaml

27 lines
526 B
YAML

# services/maintenance/pi-usb-scratch-rbac.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: pi-usb-scratch
rules:
- apiGroups: [""]
resources:
- nodes
verbs:
- get
- list
- patch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: pi-usb-scratch
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: pi-usb-scratch
subjects:
- kind: ServiceAccount
name: pi-usb-scratch
namespace: maintenance