Added k8s-secrets

2025-09-03 13:48:29 +03:00
parent e8588a2d3b
commit f06c80162f
6 changed files with 167 additions and 0 deletions
--- a/k8s/apps/k8s-secrets/rbac.yaml
+++ b/k8s/apps/k8s-secrets/rbac.yaml
@@ -0,0 +1,20 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: secret-reader
+rules:
+- apiGroups: [""]
+  resources: ["secrets"]
+  verbs: ["get", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: secret-reader
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: secret-reader
+subjects:
+- kind: ServiceAccount
+  name: secret-reader