Skip to content

Commit ed13cb2

Browse files
committed
dashboard role fixes
1 parent cb53f06 commit ed13cb2

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed

authorization/role.yml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,3 +24,30 @@ roleRef:
2424
kind: Role
2525
name: pod-reader
2626
apiGroup: rbac.authorization.k8s.io
27+
---
28+
kind: Role
29+
apiVersion: rbac.authorization.k8s.io/v1
30+
metadata:
31+
namespace: kubernetes-dashboard
32+
name: dashboard
33+
rules:
34+
- apiGroups: [""]
35+
resources: ["pods", "services", "services/proxy"]
36+
verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
37+
- apiGroups: [""]
38+
resources: ["*"]
39+
verbs: ["proxy"]
40+
---
41+
kind: RoleBinding
42+
apiVersion: rbac.authorization.k8s.io/v1
43+
metadata:
44+
name: access-dashboard
45+
namespace: kubernetes-dashboard
46+
subjects:
47+
- kind: Group
48+
name: developers
49+
apiGroup: rbac.authorization.k8s.io
50+
roleRef:
51+
kind: Role
52+
name: dashboard
53+
apiGroup: rbac.authorization.k8s.io

0 commit comments

Comments
 (0)