vnfs/DAaaS/deploy/00-init/rook-ceph/templates/clusterrolebinding.yaml

   1 {{- if .Values.rbacEnable }}
   2 # Grant the rook system daemons cluster-wide access to manage the Rook CRDs, PVCs, and storage classes
   3 kind: ClusterRoleBinding
   4 apiVersion: rbac.authorization.k8s.io/v1beta1
   5 metadata:
   6   name: rook-ceph-global
   7   labels:
   8     operator: rook
   9     storage-backend: ceph
  10     chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
  11 roleRef:
  12   apiGroup: rbac.authorization.k8s.io
  13   kind: ClusterRole
  14   name: rook-ceph-global
  15 subjects:
  16 - kind: ServiceAccount
  17   name: rook-ceph-system
  18   namespace: {{ .Release.Namespace }}
  19 {{- if .Values.pspEnable }}
  20 ---
  21 apiVersion: rbac.authorization.k8s.io/v1beta1
  22 kind: ClusterRoleBinding
  23 metadata:
  24   name: rook-ceph-system-psp-users
  25   labels:
  26     operator: rook
  27     storage-backend: ceph
  28     chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"
  29 roleRef:
  30   apiGroup: rbac.authorization.k8s.io
  31   kind: ClusterRole
  32   name: rook-ceph-system-psp-user
  33 subjects:
  34 - kind: ServiceAccount
  35   name: rook-ceph-system
  36   namespace: {{ .Release.Namespace }}
  37 {{- end }}
  38 {{- end }}