| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRoleBinding |
| metadata: |
| name: heapster-binding |
| labels: |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: system:heapster |
| subjects: |
| - kind: ServiceAccount |
| name: heapster |
| namespace: kube-system |
| --- |
| # Heapster's pod_nanny monitors the heapster deployment & its pod(s), and scales |
| # the resources of the deployment if necessary. |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: Role |
| metadata: |
| name: system:pod-nanny |
| namespace: kube-system |
| labels: |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| rules: |
| - apiGroups: |
| - "" |
| resources: |
| - pods |
| verbs: |
| - get |
| - apiGroups: |
| - "extensions" |
| resources: |
| - deployments |
| verbs: |
| - get |
| - update |
| --- |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: RoleBinding |
| metadata: |
| name: heapster-binding |
| namespace: kube-system |
| labels: |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: Role |
| name: system:pod-nanny |
| subjects: |
| - kind: ServiceAccount |
| name: heapster |
| namespace: kube-system |
| --- |