mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-05-09 18:57:46 +00:00
1e2288b9a8
Reorganize permissions example. Permissions for optional features are separated from those that are mandatory. Revised the list of permissions. Added and removed features to make it fit what Mizu currently requires.
27 lines
671 B
YAML
27 lines
671 B
YAML
# This example shows permissions that enrich the logs with additional info
|
|
# Optional with `mizu tap` or `mizu-install`
|
|
kind: ClusterRole
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: mizu-runner-debug-clusterrole
|
|
rules:
|
|
- apiGroups: ["events.k8s.io"]
|
|
resources: ["events"]
|
|
verbs: ["watch"]
|
|
- apiGroups: [""]
|
|
resources: ["pods"]
|
|
verbs: ["get"]
|
|
---
|
|
kind: ClusterRoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: mizu-runner-debug-clusterrolebindings
|
|
subjects:
|
|
- kind: User
|
|
name: user1
|
|
apiGroup: rbac.authorization.k8s.io
|
|
roleRef:
|
|
kind: ClusterRole
|
|
name: mizu-runner-debug-clusterrole
|
|
apiGroup: rbac.authorization.k8s.io
|