aboutsummaryrefslogtreecommitdiff
path: root/events-kube/rbac/cluster-events-watcher.yml
diff options
context:
space:
mode:
Diffstat (limited to 'events-kube/rbac/cluster-events-watcher.yml')
-rw-r--r--events-kube/rbac/cluster-events-watcher.yml30
1 files changed, 30 insertions, 0 deletions
diff --git a/events-kube/rbac/cluster-events-watcher.yml b/events-kube/rbac/cluster-events-watcher.yml
new file mode 100644
index 0000000..c8384b6
--- /dev/null
+++ b/events-kube/rbac/cluster-events-watcher.yml
@@ -0,0 +1,30 @@
+# If events-kube-kafka-* goes crashlooping you probably need this
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+ name: events-watcher
+ labels:
+ origin: github.com_Yolean_kubernetes-kafka
+rules:
+- apiGroups:
+ - ""
+ resources:
+ - events
+ verbs:
+ - watch
+---
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+ name: kafka-events-watcher
+ labels:
+ origin: github.com_Yolean_kubernetes-kafka
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: events-watcher
+subjects:
+- kind: ServiceAccount
+ name: default
+ namespace: kafka