| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRole |
| metadata: |
| name: stackdriver:metadata-agent |
| labels: |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| rules: |
| - apiGroups: |
| - "*" |
| resources: |
| - "*" |
| verbs: |
| - watch |
| - get |
| - list |
| --- |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRoleBinding |
| metadata: |
| name: stackdriver:metadata-agent |
| labels: |
| kubernetes.io/cluster-service: "true" |
| addonmanager.kubernetes.io/mode: Reconcile |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: stackdriver:metadata-agent |
| subjects: |
| - kind: ServiceAccount |
| name: metadata-agent |
| namespace: kube-system |