easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kube-prometheus: Fix config reloader RBAC

Browse Source
This commit is contained in:
Frederic Branczyk
2018-04-22 10:50:26 +01:00
parent 26d1dc86c9
commit 7c07940cb8
5 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnet/prometheus/prometheus-k8s-role-binding-config.libsonnet
View File

@@ -1,5 +1,5 @@
local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet"; local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet";
{ {
new(namespace):: prometheusNamespaceRoleBinding.new(namespace, namespace, "prometheus-k8s-config") new(namespace):: prometheusNamespaceRoleBinding.new(namespace, namespace, "prometheus-k8s-config", "prometheus-k8s")
} }

2
jsonnet/prometheus/prometheus-k8s-role-binding-default.libsonnet
View File

@@ -1,5 +1,5 @@
local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet"; local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet";
{ {
new(namespace):: prometheusNamespaceRoleBinding.new(namespace, "default", "prometheus-k8s") new(namespace):: prometheusNamespaceRoleBinding.new(namespace, "default", "prometheus-k8s", "prometheus-k8s")
} }

2
jsonnet/prometheus/prometheus-k8s-role-binding-kube-system.libsonnet
View File

@@ -1,5 +1,5 @@
local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet"; local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet";
{ {
new(namespace):: prometheusNamespaceRoleBinding.new(namespace, "kube-system", "prometheus-k8s") new(namespace):: prometheusNamespaceRoleBinding.new(namespace, "kube-system", "prometheus-k8s", "prometheus-k8s")
} }

2
jsonnet/prometheus/prometheus-k8s-role-binding-namespace.libsonnet
View File

@@ -1,5 +1,5 @@
local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet"; local prometheusNamespaceRoleBinding = import "prometheus-namespace-role-binding.libsonnet";
{ {
new(namespace):: prometheusNamespaceRoleBinding.new(namespace, namespace, "prometheus-k8s") new(namespace):: prometheusNamespaceRoleBinding.new(namespace, namespace, "prometheus-k8s", "prometheus-k8s")
} }

8
jsonnet/prometheus/prometheus-namespace-role-binding.libsonnet
View File

@@ -2,12 +2,12 @@ local k = import "ksonnet.beta.3/k.libsonnet";
local roleBinding = k.rbac.v1.roleBinding; local roleBinding = k.rbac.v1.roleBinding;
{ {
new(serviceAccountNamespace, namespace, name):: new(serviceAccountNamespace, namespace, roleName, serviceAccountName)::
roleBinding.new() + roleBinding.new() +
roleBinding.mixin.metadata.withName(name) + roleBinding.mixin.metadata.withName(roleName) +
roleBinding.mixin.metadata.withNamespace(namespace) + roleBinding.mixin.metadata.withNamespace(namespace) +
roleBinding.mixin.roleRef.withApiGroup("rbac.authorization.k8s.io") + roleBinding.mixin.roleRef.withApiGroup("rbac.authorization.k8s.io") +
roleBinding.mixin.roleRef.withName(name) + roleBinding.mixin.roleRef.withName(roleName) +
roleBinding.mixin.roleRef.mixinInstance({kind: "Role"}) + roleBinding.mixin.roleRef.mixinInstance({kind: "Role"}) +
roleBinding.withSubjects([{kind: "ServiceAccount", name: name, namespace: serviceAccountNamespace}]) roleBinding.withSubjects([{kind: "ServiceAccount", name: serviceAccountName, namespace: serviceAccountNamespace}])
} }