This commit is contained in:
2025-08-25 21:01:09 +02:00
parent 4ebf4d6e81
commit 40761ca8e9

View File

@@ -1,32 +1,3 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: external-dns
namespace: dns
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata: { name: external-dns }
rules:
- apiGroups: [""]
resources: ["services","endpoints","pods","nodes","namespaces"]
verbs: ["get","list","watch"]
- apiGroups: ["discovery.k8s.io"]
resources: ["endpointslices"]
verbs: ["get","list","watch"]
- apiGroups: ["networking.k8s.io","extensions"]
resources: ["ingresses","ingressclasses"]
verbs: ["get","list","watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata: { name: external-dns-viewer }
roleRef: { apiGroup: rbac.authorization.k8s.io, kind: ClusterRole, name: external-dns }
subjects:
- kind: ServiceAccount
name: external-dns
namespace: dns
---
apiVersion: v1
kind: ServiceAccount