prysm-pulse/k8s/nginx/rbac.yaml
Preston Van Loon 740a9b76a7
Kubernetes - Part 3 of ?? (#981)
* Add nginx ingress for proof-of-work namespace

* connect beacon-chain to pow namespace geth-nodes for websocket connections

* Added relay to beacon-chain

* Route inbound TCP traffic on port 20000 to beacon-relay

* Add bootnode

* Add a basic pk

* checkpoint

* Added flag for p2p port

* Register flag with main

* Set P2P port specifically

* Add beacon chain config

* add deployvrc job

* Add deployvrc service account

* review

* gazelle

* a cluster is needed, i guess
2018-11-28 00:27:21 -05:00

72 lines
972 B
YAML

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: nginx-ingress
rules:
- apiGroups:
- ""
resources:
- services
- endpoints
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- secrets
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- configmaps
verbs:
- get
- list
- watch
- update
- create
- apiGroups:
- ""
resources:
- pods
verbs:
- list
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- extensions
resources:
- ingresses
verbs:
- list
- watch
- get
- apiGroups:
- "extensions"
resources:
- ingresses/status
verbs:
- update
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: nginx-ingress
subjects:
- kind: ServiceAccount
name: nginx-ingress
namespace: nginx-ingress
roleRef:
kind: ClusterRole
name: nginx-ingress
apiGroup: rbac.authorization.k8s.io