Skip to content

Instantly share code, notes, and snippets.

@indradhanush
Last active April 10, 2018 14:26
Show Gist options
  • Save indradhanush/f8e79c5097370afd7f75d50f0b65a840 to your computer and use it in GitHub Desktop.
Save indradhanush/f8e79c5097370afd7f75d50f0b65a840 to your computer and use it in GitHub Desktop.
Kubernetes manifest for the habitat service broker
apiVersion: v1
kind: ServiceAccount
metadata:
name: habitat-broker
namespace: habitat-broker
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: habitat-broker
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: habitat-broker
subjects:
- kind: ServiceAccount
name: habitat-broker
namespace: habitat-broker
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
name: habitat-broker
rules:
- apiGroups:
- apiextensions.k8s.io
resources:
- customresourcedefinitions
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups:
- habitat.sh
resources:
- habitats
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups:
- apps
resources:
- deployments
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources:
- configmaps
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources:
- secrets
verbs: ["get", "list", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources:
- pods
verbs: ["get", "list", "watch", "update", "patch", "delete"]
- apiGroups: [""]
resources:
- namespaces
verbs: ["list"]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment