mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-07 17:24:05 +00:00
Put RBAC configuration together
Although it duplicates some code, we prefer duplicate some code and place this files together.
This commit is contained in:
parent
c24fa324d2
commit
1308d7fc35
@ -1,7 +1,7 @@
|
|||||||
deploy: rbac create configure
|
deploy: rbac create configure
|
||||||
|
|
||||||
rbac:
|
rbac:
|
||||||
kubectl apply -f ../cluster-role.yaml
|
kubectl apply -f cluster-role.yaml
|
||||||
kubectl apply -f cluster-role-binding.yaml
|
kubectl apply -f cluster-role-binding.yaml
|
||||||
|
|
||||||
create:
|
create:
|
||||||
@ -14,4 +14,4 @@ configure:
|
|||||||
clean:
|
clean:
|
||||||
terraform destroy -force
|
terraform destroy -force
|
||||||
kubectl delete -f cluster-role-binding.yaml
|
kubectl delete -f cluster-role-binding.yaml
|
||||||
kubectl delete -f ../cluster-role.yaml
|
kubectl delete -f cluster-role.yaml
|
||||||
|
@ -1,11 +1,9 @@
|
|||||||
deploy:
|
deploy:
|
||||||
kubectl apply -f nats/
|
kubectl apply -f nats/
|
||||||
kubectl apply -f kubeless/
|
kubectl apply -f kubeless/
|
||||||
kubectl apply -f ../cluster-role.yaml
|
|
||||||
kubectl apply -f .
|
kubectl apply -f .
|
||||||
|
|
||||||
clean:
|
clean:
|
||||||
kubectl delete -f kubeless/
|
kubectl delete -f kubeless/
|
||||||
kubectl delete -f nats/
|
kubectl delete -f nats/
|
||||||
kubectl delete -f .
|
kubectl delete -f .
|
||||||
kubectl delete -f ../cluster-role.yaml
|
|
||||||
|
@ -0,0 +1,25 @@
|
|||||||
|
kind: ClusterRole
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
metadata:
|
||||||
|
name: kubernetes-response-engine-cluster-role
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- delete
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- nodes
|
||||||
|
verbs:
|
||||||
|
- patch
|
||||||
|
- apiGroups:
|
||||||
|
- batch
|
||||||
|
resources:
|
||||||
|
- jobs
|
||||||
|
verbs:
|
||||||
|
- create
|
Loading…
Reference in New Issue
Block a user