107 lines
1.8 KiB
YAML
107 lines
1.8 KiB
YAML
|
apiVersion: v1
|
||
|
|
kind: ServiceAccount
|
||
|
|
metadata:
|
||
|
|
name: short-controller
|
||
|
|
namespace: short
|
||
|
|
---
|
||
|
|
apiVersion: coordination.k8s.io/v1
|
||
|
|
kind: Lease
|
||
|
|
metadata:
|
||
|
|
name: controller
|
||
|
|
namespace: short
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: Role
|
||
|
|
metadata:
|
||
|
|
name: controller
|
||
|
|
namespace: short
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- coordination.k8s.io
|
||
|
|
resources:
|
||
|
|
- leases
|
||
|
|
resourceNames:
|
||
|
|
- controller
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
- update
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: RoleBinding
|
||
|
|
metadata:
|
||
|
|
name: controller
|
||
|
|
namespace: short
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: Role
|
||
|
|
name: controller
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: short-controller
|
||
|
|
namespace: short
|
||
|
|
---
|
||
|
|
apiVersion: cilium.io/v2
|
||
|
|
kind: CiliumCIDRGroup
|
||
|
|
metadata:
|
||
|
|
name: short
|
||
|
|
annotations:
|
||
|
|
kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
|
||
|
|
spec:
|
||
|
|
externalCIDRs: []
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRole
|
||
|
|
metadata:
|
||
|
|
name: short-peers
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- cilium.io
|
||
|
|
resources:
|
||
|
|
- ciliumcidrgroups
|
||
|
|
resourceNames:
|
||
|
|
- short
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
- update
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: ClusterRoleBinding
|
||
|
|
metadata:
|
||
|
|
name: short-peers
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: ClusterRole
|
||
|
|
name: short-peers
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: short-controller
|
||
|
|
namespace: short
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: Role
|
||
|
|
metadata:
|
||
|
|
name: short-gateway
|
||
|
|
namespace: kube-system
|
||
|
|
rules:
|
||
|
|
- apiGroups:
|
||
|
|
- ''
|
||
|
|
resources:
|
||
|
|
- services
|
||
|
|
resourceNames:
|
||
|
|
- cilium-gateway-gateway-short
|
||
|
|
verbs:
|
||
|
|
- get
|
||
|
|
---
|
||
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
||
|
|
kind: RoleBinding
|
||
|
|
metadata:
|
||
|
|
name: short-gateway
|
||
|
|
namespace: kube-system
|
||
|
|
roleRef:
|
||
|
|
apiGroup: rbac.authorization.k8s.io
|
||
|
|
kind: Role
|
||
|
|
name: short-gateway
|
||
|
|
subjects:
|
||
|
|
- kind: ServiceAccount
|
||
|
|
name: short-controller
|
||
|
|
namespace: short
|