feat: RBAC ClusterRole for console namespace management

2026-04-19 09:55:55 +03:00
parent 8aad0cec58
commit e541ba6996
1 changed files with 27 additions and 0 deletions
@@ -0,0 +1,27 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
  name: fission-console-ns-manager
 rules:
 - apiGroups: [""]
  resources: ["namespaces"]
  verbs: ["get", "create"]
 - apiGroups: ["fission.io"]
  resources: ["*"]
  verbs: ["*"]
 - apiGroups: ["rbac.authorization.k8s.io"]
  resources: ["rolebindings"]
  verbs: ["get", "create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
  name: fission-console-ns-manager
 roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: fission-console-ns-manager
 subjects:
 - kind: ServiceAccount
  name: fission-console
  namespace: fission