Service Account, Role and RoleBinding Creation
In this section, you will learn to create a service account, role and rolebinding resources.
A sample command to create the resources is as follows:
kubectl -n <ocudr-namespace> create -f
ocudr-sample-resource-template.yaml
A sample template to create the resources is as follows:
Note:
You need to update the <helm-release> and <namespace> values with its respective ocudr namespace and ocudr helm release name.#
# Sample template start
#
apiVersion: v1
kind: ServiceAccount
metadata:
name: <helm-release>-serviceaccount
namespace: <namespace>
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: <helm-release>-role
namespace: <namespace>
rules:
- apiGroups:
- "" # "" indicates the core API group
resources:
- services
- configmaps
- pods
- secrets
- endpoints
verbs:
- get
- watch
- list
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
name: <helm-release>-rolebinding
namespace: <namespace>
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: <helm-release>-role
subjects:
- kind: ServiceAccount
name: <helm-release>-serviceaccount
namespace: <namespace>
#
# Sample template end
#