Files
kube-prometheus/jsonnet/prometheus/prometheus-namespace-role-binding.libsonnet
2018-04-22 10:50:26 +01:00

14 lines
621 B
Jsonnet

local k = import "ksonnet.beta.3/k.libsonnet";
local roleBinding = k.rbac.v1.roleBinding;
{
new(serviceAccountNamespace, namespace, roleName, serviceAccountName)::
roleBinding.new() +
roleBinding.mixin.metadata.withName(roleName) +
roleBinding.mixin.metadata.withNamespace(namespace) +
roleBinding.mixin.roleRef.withApiGroup("rbac.authorization.k8s.io") +
roleBinding.mixin.roleRef.withName(roleName) +
roleBinding.mixin.roleRef.mixinInstance({kind: "Role"}) +
roleBinding.withSubjects([{kind: "ServiceAccount", name: serviceAccountName, namespace: serviceAccountNamespace}])
}