| # Licensed to the Apache Software Foundation (ASF) under one or more contributor |
| # license agreements; and to You under the Apache License, Version 2.0. |
| |
| # Core pods are allowed to have view access to k8s APIs |
| apiVersion: rbac.authorization.k8s.io/v1 |
| kind: RoleBinding |
| metadata: |
| name: {{ .Release.Name }}-allow-view |
| labels: |
| {{ include "openwhisk.label_boilerplate" . | indent 4 }} |
| roleRef: |
| apiGroup: rbac.authorization.k8s.io |
| kind: ClusterRole |
| name: view |
| subjects: |
| - kind: ServiceAccount |
| name: {{ .Release.Name }}-core |
| namespace: {{ .Release.Namespace | quote }} |
