From fb17d6fd583ae40479a6802825ac1843a629c4dc Mon Sep 17 00:00:00 2001 From: ab Date: Mon, 4 May 2026 15:16:20 +0000 Subject: [PATCH] Update k8s/apps/pasarguard/daemonset.yaml --- k8s/apps/pasarguard/daemonset.yaml | 137 +++++++++++++++-------------- 1 file changed, 69 insertions(+), 68 deletions(-) diff --git a/k8s/apps/pasarguard/daemonset.yaml b/k8s/apps/pasarguard/daemonset.yaml index 1bc3ffb..e3a8bce 100644 --- a/k8s/apps/pasarguard/daemonset.yaml +++ b/k8s/apps/pasarguard/daemonset.yaml @@ -1,72 +1,5 @@ +--- image: &image 'pasarguard/node:v0.3.0' ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: pasarguard-node - labels: - app: pasarguard-node ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: pasarguard-node-configmap - labels: - app: pasarguard-node -rules: - - apiGroups: [""] - resources: ["configmaps"] - verbs: ["get", "list", "create", "update", "patch"] - - apiGroups: ["cert-manager.io"] - resources: ["certificates"] - verbs: ["get", "list", "create", "update", "patch", "delete"] - - apiGroups: [""] - resources: ["secrets"] - verbs: ["get", "list"] - - apiGroups: [""] - resources: ["services", "endpoints"] - verbs: ["get", "list", "create", "update", "patch", "delete"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: pasarguard-node-configmap - labels: - app: pasarguard-node -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: pasarguard-node-configmap -subjects: - - kind: ServiceAccount - name: pasarguard-node ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: pasarguard-node-reader - labels: - app: pasarguard-node -rules: - - apiGroups: [""] - resources: ["nodes"] - verbs: ["get", "list"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: pasarguard-node-reader - labels: - app: pasarguard-node -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: pasarguard-node-reader -subjects: - - kind: ServiceAccount - name: pasarguard-node - namespace: pasarguard ---- apiVersion: apps/v1 kind: DaemonSet metadata: @@ -220,3 +153,71 @@ spec: configMap: name: pasarguard-scripts defaultMode: 0755 + +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: pasarguard-node + labels: + app: pasarguard-node +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: pasarguard-node-configmap + labels: + app: pasarguard-node +rules: + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["get", "list", "create", "update", "patch"] + - apiGroups: ["cert-manager.io"] + resources: ["certificates"] + verbs: ["get", "list", "create", "update", "patch", "delete"] + - apiGroups: [""] + resources: ["secrets"] + verbs: ["get", "list"] + - apiGroups: [""] + resources: ["services", "endpoints"] + verbs: ["get", "list", "create", "update", "patch", "delete"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: pasarguard-node-configmap + labels: + app: pasarguard-node +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: pasarguard-node-configmap +subjects: + - kind: ServiceAccount + name: pasarguard-node +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: pasarguard-node-reader + labels: + app: pasarguard-node +rules: + - apiGroups: [""] + resources: ["nodes"] + verbs: ["get", "list"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: pasarguard-node-reader + labels: + app: pasarguard-node +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: pasarguard-node-reader +subjects: + - kind: ServiceAccount + name: pasarguard-node + namespace: pasarguard \ No newline at end of file