binding group system:nodes to clusterrole calico-role

2026-05-19 23:07:47 -02:30 · 2017-07-07 15:43:48 +08:00
parent c9734b6d7b
commit 2cda982345
5 changed files with 49 additions and 3 deletions
--- a/roles/network_plugin/calico/templates/calico-node-clusterrolebinding.yml
+++ b/roles/network_plugin/calico/templates/calico-node-clusterrolebinding.yml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  name: calico-node
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: calico-node
+subjects:
+- kind: Group
+  name: system:nodes
+  namespace: kube-system