010-crd_rbac.yaml 3.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168
  1. ---
  2. apiVersion: apiextensions.k8s.io/v1beta1
  3. kind: CustomResourceDefinition
  4. metadata:
  5. name: ingressroutes.traefik.containo.us
  6. spec:
  7. group: traefik.containo.us
  8. version: v1alpha1
  9. names:
  10. kind: IngressRoute
  11. plural: ingressroutes
  12. singular: ingressroute
  13. scope: Namespaced
  14. ---
  15. apiVersion: apiextensions.k8s.io/v1beta1
  16. kind: CustomResourceDefinition
  17. metadata:
  18. name: ingressroutetcps.traefik.containo.us
  19. spec:
  20. group: traefik.containo.us
  21. version: v1alpha1
  22. names:
  23. kind: IngressRouteTCP
  24. plural: ingressroutetcps
  25. singular: ingressroutetcp
  26. scope: Namespaced
  27. ---
  28. apiVersion: apiextensions.k8s.io/v1beta1
  29. kind: CustomResourceDefinition
  30. metadata:
  31. name: middlewares.traefik.containo.us
  32. spec:
  33. group: traefik.containo.us
  34. version: v1alpha1
  35. names:
  36. kind: Middleware
  37. plural: middlewares
  38. singular: middleware
  39. scope: Namespaced
  40. ---
  41. apiVersion: apiextensions.k8s.io/v1beta1
  42. kind: CustomResourceDefinition
  43. metadata:
  44. name: tlsoptions.traefik.containo.us
  45. spec:
  46. group: traefik.containo.us
  47. version: v1alpha1
  48. names:
  49. kind: TLSOption
  50. plural: tlsoptions
  51. singular: tlsoption
  52. scope: Namespaced
  53. ---
  54. apiVersion: apiextensions.k8s.io/v1beta1
  55. kind: CustomResourceDefinition
  56. metadata:
  57. name: traefikservices.traefik.containo.us
  58. spec:
  59. group: traefik.containo.us
  60. version: v1alpha1
  61. names:
  62. kind: TraefikService
  63. plural: traefikservices
  64. singular: traefikservice
  65. scope: Namespaced
  66. ---
  67. apiVersion: apiextensions.k8s.io/v1beta1
  68. kind: CustomResourceDefinition
  69. metadata:
  70. name: tlsstores.traefik.containo.us
  71. spec:
  72. group: traefik.containo.us
  73. version: v1alpha1
  74. names:
  75. kind: TLSStore
  76. plural: tlsstores
  77. singular: tlsstore
  78. scope: Namespaced
  79. ---
  80. apiVersion: apiextensions.k8s.io/v1beta1
  81. kind: CustomResourceDefinition
  82. metadata:
  83. name: ingressrouteudps.traefik.containo.us
  84. spec:
  85. group: traefik.containo.us
  86. version: v1alpha1
  87. names:
  88. kind: IngressRouteUDP
  89. plural: ingressrouteudps
  90. singular: ingressrouteudp
  91. scope: Namespaced
  92. ---
  93. kind: ClusterRole
  94. apiVersion: rbac.authorization.k8s.io/v1beta1
  95. metadata:
  96. name: traefik-ingress-controller
  97. rules:
  98. - apiGroups:
  99. - ""
  100. resources:
  101. - services
  102. - endpoints
  103. - secrets
  104. verbs:
  105. - get
  106. - list
  107. - watch
  108. - apiGroups:
  109. - extensions
  110. resources:
  111. - ingresses
  112. verbs:
  113. - get
  114. - list
  115. - watch
  116. - apiGroups:
  117. - extensions
  118. resources:
  119. - ingresses/status
  120. verbs:
  121. - update
  122. - apiGroups:
  123. - traefik.containo.us
  124. resources:
  125. - middlewares
  126. - ingressroutes
  127. - traefikservices
  128. - ingressroutetcps
  129. - ingressrouteudps
  130. - tlsoptions
  131. - tlsstores
  132. verbs:
  133. - get
  134. - list
  135. - watch
  136. ---
  137. kind: ClusterRoleBinding
  138. apiVersion: rbac.authorization.k8s.io/v1beta1
  139. metadata:
  140. name: traefik-ingress-controller
  141. roleRef:
  142. apiGroup: rbac.authorization.k8s.io
  143. kind: ClusterRole
  144. name: traefik-ingress-controller
  145. subjects:
  146. - kind: ServiceAccount
  147. name: traefik
  148. namespace: kube-system