sip/config/rbac/leader_election_role_binding.yaml
Drew Walters 324e4e5ed3 Fix sipcluster-infra-service ClusterRole
SIP needs permission to create, modify, and watch deployments. While
deployments is listed in one of the SIP ClusterRoles, the apiGroup apps
is not present, so SIP cannot watch deplyoments that manage
infrastructure services. This change adds the missing apiGroup.

Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ie376649cd67a82501c72d3ffdbb67cfe6e802934
2021-02-26 21:03:03 +00:00

13 lines
274 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: leader-election-rolebinding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: leader-election-role
subjects:
- kind: ServiceAccount
name: default
namespace: sipcluster-system