mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2025-12-15 22:34:21 +03:00
47 lines
1.1 KiB
Django/Jinja
47 lines
1.1 KiB
Django/Jinja
{% if cilium_hubble_tls_generate %}
|
|
---
|
|
# Source: cilium/templates/hubble-generate-certs-clusterrolebinding.yaml
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: hubble-generate-certs
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: hubble-generate-certs
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: hubble-generate-certs
|
|
namespace: kube-system
|
|
{% endif %}
|
|
---
|
|
# Source: cilium/templates/hubble-relay-clusterrolebinding.yaml
|
|
kind: ClusterRoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: hubble-relay
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: hubble-relay
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
namespace: kube-system
|
|
name: hubble-relay
|
|
{% if cilium_enable_hubble_ui %}
|
|
---
|
|
# Source: cilium/templates/hubble-ui-clusterrolebinding.yaml
|
|
kind: ClusterRoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: hubble-ui
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: hubble-ui
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
namespace: kube-system
|
|
name: hubble-ui
|
|
{% endif %}
|