|
|
@ -23,7 +23,7 @@ metadata:
|
|
|
|
name: tiller
|
|
|
|
name: tiller
|
|
|
|
namespace: kube-system
|
|
|
|
namespace: kube-system
|
|
|
|
---
|
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: ClusterRoleBinding
|
|
|
|
kind: ClusterRoleBinding
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller
|
|
|
|
name: tiller
|
|
|
@ -61,7 +61,7 @@ Define a Role that allows Tiller to manage all resources in `tiller-world` like
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: Role
|
|
|
|
kind: Role
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-manager
|
|
|
|
name: tiller-manager
|
|
|
|
namespace: tiller-world
|
|
|
|
namespace: tiller-world
|
|
|
@ -80,7 +80,7 @@ In `rolebinding-tiller.yaml`,
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: RoleBinding
|
|
|
|
kind: RoleBinding
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-binding
|
|
|
|
name: tiller-binding
|
|
|
|
namespace: tiller-world
|
|
|
|
namespace: tiller-world
|
|
|
@ -137,7 +137,7 @@ Define a Role that allows Tiller to manage all resources in `myorg-users` like i
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: Role
|
|
|
|
kind: Role
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-manager
|
|
|
|
name: tiller-manager
|
|
|
|
namespace: myorg-users
|
|
|
|
namespace: myorg-users
|
|
|
@ -156,7 +156,7 @@ Bind the service account to that role. In `rolebinding-tiller.yaml`,
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: RoleBinding
|
|
|
|
kind: RoleBinding
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-binding
|
|
|
|
name: tiller-binding
|
|
|
|
namespace: myorg-users
|
|
|
|
namespace: myorg-users
|
|
|
@ -179,7 +179,7 @@ We'll also need to grant Tiller access to read configmaps in myorg-system so it
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: Role
|
|
|
|
kind: Role
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
namespace: myorg-system
|
|
|
|
namespace: myorg-system
|
|
|
|
name: tiller-manager
|
|
|
|
name: tiller-manager
|
|
|
@ -198,7 +198,7 @@ And the respective role binding. In `rolebinding-tiller-myorg-system.yaml`:
|
|
|
|
|
|
|
|
|
|
|
|
```yaml
|
|
|
|
```yaml
|
|
|
|
kind: RoleBinding
|
|
|
|
kind: RoleBinding
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-binding
|
|
|
|
name: tiller-binding
|
|
|
|
namespace: myorg-system
|
|
|
|
namespace: myorg-system
|
|
|
@ -234,7 +234,7 @@ metadata:
|
|
|
|
name: helm
|
|
|
|
name: helm
|
|
|
|
namespace: helm-world
|
|
|
|
namespace: helm-world
|
|
|
|
---
|
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: Role
|
|
|
|
kind: Role
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-user
|
|
|
|
name: tiller-user
|
|
|
@ -253,7 +253,7 @@ rules:
|
|
|
|
verbs:
|
|
|
|
verbs:
|
|
|
|
- list
|
|
|
|
- list
|
|
|
|
---
|
|
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
|
|
kind: RoleBinding
|
|
|
|
kind: RoleBinding
|
|
|
|
metadata:
|
|
|
|
metadata:
|
|
|
|
name: tiller-user-binding
|
|
|
|
name: tiller-user-binding
|
|
|
|