GPU-Live/ddn-exi/exa-csi-driver-2.3.5/deploy/helm-chart/templates/metrics/rbac.yaml

57 lines
1.5 KiB
YAML

{{- if .Values.metrics.enabled }}
apiVersion: v1
kind: ServiceAccount
metadata:
name: exa-csi-metrics-sa
namespace: {{ .Values.metrics.exporter.namespace }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: exa-csi-metrics-clusterrole
rules:
- apiGroups: [""]
resources: ["persistentvolumes", "persistentvolumeclaims", "nodes", "pods"]
verbs: ["get", "list"]
- apiGroups: ["storage.k8s.io"]
resources: ["storageclasses"]
verbs: ["get", "list", "watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: exa-csi-metrics-clusterrole-binding
subjects:
- kind: ServiceAccount
name: exa-csi-metrics-sa
namespace: {{ .Values.metrics.exporter.namespace }}
roleRef:
kind: ClusterRole
name: exa-csi-metrics-clusterrole
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: exa-csi-leader-election
namespace: {{ .Values.metrics.exporter.namespace }}
rules:
- apiGroups: ["coordination.k8s.io"]
resources: ["leases"]
verbs: ["get", "watch", "list", "create", "update", "patch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: exa-csi-leader-election
namespace: {{ .Values.metrics.exporter.namespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: exa-csi-leader-election
subjects:
- kind: ServiceAccount
name: exa-csi-metrics-sa
namespace: {{ .Values.metrics.exporter.namespace }}
{{- end }}