vnfs/DAaaS/operator/charts/sparkoperator/templates/spark-rbac.yaml

   1 {{- if and (.Values.rbac.create) (ne .Values.sparkJobNamespace "") }}
   2 apiVersion: rbac.authorization.k8s.io/v1
   3 kind: Role
   4 metadata:
   5   namespace: {{ .Values.sparkJobNamespace }}
   6   name: spark-role
   7   labels:
   8     app.kubernetes.io/name: {{ include "sparkoperator.name" . }}
   9     helm.sh/chart: {{ include "sparkoperator.chart" . }}
  10     app.kubernetes.io/instance: {{ .Release.Name }}
  11     app.kubernetes.io/managed-by: {{ .Release.Service }}
  12 rules:
  13 - apiGroups:
  14   - "" # "" indicates the core API group
  15   resources:
  16   - "pods"
  17   verbs:
  18   - "*"
  19 - apiGroups:
  20   - "" # "" indicates the core API group
  21   resources:
  22   - "services"
  23   verbs:
  24   - "*"
  25 ---
  26 apiVersion: rbac.authorization.k8s.io/v1
  27 kind: RoleBinding
  28 metadata:
  29   name: spark-role-binding
  30   namespace: {{ .Values.sparkJobNamespace }}
  31   labels:
  32     app.kubernetes.io/name: {{ include "sparkoperator.name" . }}
  33     helm.sh/chart: {{ include "sparkoperator.chart" . }}
  34     app.kubernetes.io/instance: {{ .Release.Name }}
  35     app.kubernetes.io/managed-by: {{ .Release.Service }}
  36 subjects:
  37 - kind: ServiceAccount
  38   name: {{ include "spark.serviceAccountName" . }}
  39   namespace: {{ .Values.sparkJobNamespace }}
  40 roleRef:
  41   kind: Role
  42   name: spark-role
  43   apiGroup: rbac.authorization.k8s.io
  44 {{- end }}