ce7cb702218693d08ea6d83464d2457c9250027c

services/short/k8s/control/rbac.yaml

@@ -0,0 +1,107 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: short-controller
+  namespace: short
+---
+apiVersion: coordination.k8s.io/v1
+kind: Lease
+metadata:
+  name: controller
+  namespace: short
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: controller
+  namespace: short
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  resourceNames:
+  - controller
+  verbs:
+  - get
+  - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: controller
+  namespace: short
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: controller
+subjects:
+- kind: ServiceAccount
+  name: short-controller
+  namespace: short
+---
+apiVersion: cilium.io/v2
+kind: CiliumCIDRGroup
+metadata:
+  name: short
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
+spec:
+  externalCIDRs: []
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: short-peers
+rules:
+- apiGroups:
+  - cilium.io
+  resources:
+  - ciliumcidrgroups
+  resourceNames:
+  - short
+  verbs:
+  - get
+  - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: short-peers
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: short-peers
+subjects:
+- kind: ServiceAccount
+  name: short-controller
+  namespace: short
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: short-gateway
+  namespace: kube-system
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - services
+  resourceNames:
+  - cilium-gateway-gateway-short
+  verbs:
+  - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: short-gateway
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: short-gateway
+subjects:
+- kind: ServiceAccount
+  name: short-controller
+  namespace: short