blob: f6ee0955d9872fa238caa22f00b5fa12d1335b83 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
apiVersion: v1
kind: Template
metadata:
name: kube-system-service-catalog
objects:
- kind: Role
apiVersion: v1
metadata:
name: extension-apiserver-authentication-reader
namespace: ${KUBE_SYSTEM_NAMESPACE}
rules:
- apiGroups:
- ""
resourceNames:
- extension-apiserver-authentication
resources:
- configmaps
verbs:
- get
- kind: RoleBinding
apiVersion: v1
metadata:
name: extension-apiserver-authentication-reader-binding
namespace: ${KUBE_SYSTEM_NAMESPACE}
roleRef:
name: extension-apiserver-authentication-reader
namespace: kube-system
userNames:
- system:serviceaccount:kube-service-catalog:service-catalog-apiserver
parameters:
- description: Do not change this value.
displayName: Name of the kube-system namespace
name: KUBE_SYSTEM_NAMESPACE
required: true
value: kube-system
|