vnfs/DAaaS/deploy/00-init/rook-ceph/templates/rolebinding.yaml

   1 {{- if .Values.rbacEnable }}
   2 # Grant the operator, agent, and discovery agents access to resources in the rook-ceph-system namespace
   3 kind: RoleBinding
   4 apiVersion: rbac.authorization.k8s.io/v1beta1
   5 metadata:
   6   name: rook-ceph-system
   7   namespace: {{ .Release.Namespace }}
   8   labels:
   9     operator: rook
  10     storage-backend: ceph
  11 roleRef:
  12   apiGroup: rbac.authorization.k8s.io
  13   kind: Role
  14   name: rook-ceph-system
  15 subjects:
  16 - kind: ServiceAccount
  17   name: rook-ceph-system
  18   namespace: {{ .Release.Namespace }}
  19 {{- end }}