epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-10 12:18:52 +03:00
Code Issues Packages Projects Releases Wiki Activity

run netchecker-server with list pods

Browse Source
This commit is contained in:
jwfang
2017-07-17 19:28:09 +08:00
parent e1386ba604
commit a8e6a0763d
7 changed files with 42 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrole.yml.j2 Normal file
View File

@@ -0,0 +1,9 @@
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: netchecker-server
namespace: {{ netcheck_namespace }}
rules:
- apiGroups: [""]
resources: ["pods"]
verbs: ["list"]

13
roles/kubernetes-apps/ansible/templates/netchecker-server-clusterrolebinding.yml.j2 Normal file
View File

@@ -0,0 +1,13 @@
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: netchecker-server
namespace: {{ netcheck_namespace }}
subjects:
- kind: ServiceAccount
name: netchecker-server
namespace: {{ netcheck_namespace }}
roleRef:
kind: ClusterRole
name: netchecker-server
apiGroup: rbac.authorization.k8s.io

3
roles/kubernetes-apps/ansible/templates/netchecker-server-deployment.yml.j2
View File

@@ -31,3 +31,6 @@ spec:
- "-logtostderr"
- "-kubeproxyinit"
- "-endpoint=0.0.0.0:8081"
{% if rbac_enabled %}
serviceAccountName: netchecker-server
{% endif %}

7
roles/kubernetes-apps/ansible/templates/netchecker-server-sa.yml.j2 Normal file
View File

@@ -0,0 +1,7 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: netchecker-server
namespace: {{ netcheck_namespace }}
labels:
kubernetes.io/cluster-service: "true"