| apiVersion: v1 |
| items: |
| - apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRole |
| metadata: |
| labels: |
| test-cmd: auth |
| name: testing-CR |
| rules: |
| - apiGroups: |
| - "" |
| resources: |
| - pods |
| verbs: |
| - create |
| - delete |
| - deletecollection |
| - get |
| - list |
| - patch |
| - update |
| - watch |
| |
| - apiVersion: v1 |
| kind: Pod |
| metadata: |
| name: valid-pod |
| labels: |
| name: valid-pod |
| spec: |
| containers: |
| - name: kubernetes-serve-hostname |
| image: gcr.io/kubernetes-e2e-test-images/serve-hostname:1.1 |
| resources: |
| limits: |
| cpu: "1" |
| memory: 512Mi |
| |
| - apiVersion: rbac.authorization.k8s.io/v1 |
| kind: ClusterRoleBinding |
| metadata: |
| labels: |
| test-cmd: auth |
| name: testing-CRB |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: testing-CR |
| subjects: |
| - apiGroup: rbac.authorization.k8s.io |
| kind: Group |
| name: system:masters |
| |
| - apiVersion: rbac.authorization.k8s.io/v1 |
| kind: RoleBinding |
| metadata: |
| labels: |
| test-cmd: auth |
| name: testing-RB |
| namespace: some-other-random |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: testing-CR |
| subjects: |
| - apiGroup: rbac.authorization.k8s.io |
| kind: Group |
| name: system:masters |
| |
| - apiVersion: rbac.authorization.k8s.io/v1 |
| kind: Role |
| metadata: |
| labels: |
| test-cmd: auth |
| name: testing-R |
| namespace: some-other-random |
| rules: |
| - apiGroups: |
| - "" |
| resources: |
| - configmaps |
| verbs: |
| - get |
| - list |
| - watch |
| |
| kind: List |
| metadata: {} |