mirror of
https://github.com/kubeshark/kubeshark.git
synced 2026-05-09 10:47:44 +00:00
1e2288b9a8
Reorganize permissions example. Permissions for optional features are separated from those that are mandatory. Revised the list of permissions. Added and removed features to make it fit what Mizu currently requires.
29 lines
678 B
YAML
29 lines
678 B
YAML
# This example shows permissions that enrich the logs with additional info in namespace-restricted mode
|
|
# Optional with `mizu-tap`
|
|
kind: Role
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: mizu-runner-debug-role
|
|
namespace: user1
|
|
rules:
|
|
- apiGroups: ["events.k8s.io"]
|
|
resources: ["events"]
|
|
verbs: ["watch"]
|
|
- apiGroups: [""]
|
|
resources: ["pods"]
|
|
verbs: ["get"]
|
|
---
|
|
kind: RoleBinding
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
metadata:
|
|
name: mizu-runner-debug-rolebindings
|
|
namespace: user1
|
|
subjects:
|
|
- kind: User
|
|
name: user1
|
|
apiGroup: rbac.authorization.k8s.io
|
|
roleRef:
|
|
kind: Role
|
|
name: mizu-runner-debug-role
|
|
apiGroup: rbac.authorization.k8s.io
|