diff --git a/templates/mongodb-clusterRole.yml b/templates/mongodb-clusterRole.yml new file mode 100644 index 0000000000000000000000000000000000000000..94826e251ca90effd8de0b8b60a4f834396cc7f9 --- /dev/null +++ b/templates/mongodb-clusterRole.yml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ template "mongodb.name" . }} +rules: + - verbs: + - '*' + apiGroups: + - '*' + resources: + - '*' \ No newline at end of file diff --git a/templates/mongodb-clusterRoleBinding.yaml b/templates/mongodb-clusterRoleBinding.yaml new file mode 100644 index 0000000000000000000000000000000000000000..262cee4d65861c39f7e3cf1cde091a3d31bc147e --- /dev/null +++ b/templates/mongodb-clusterRoleBinding.yaml @@ -0,0 +1,12 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ template "mongodb.name" . }} +subjects: + - kind: ServiceAccount + name: {{ template "mongodb.name" . }} + namespace: {{ .Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ template "mongodb.name" . }} diff --git a/templates/mongodb-serviceAccount.yaml b/templates/mongodb-serviceAccount.yaml new file mode 100644 index 0000000000000000000000000000000000000000..5d136b8d214f6bbead8743b3168561342e1a09f9 --- /dev/null +++ b/templates/mongodb-serviceAccount.yaml @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ template "mongodb.name" . }} + namespace: {{ .Release.Namespace }} +automountServiceAccountToken: true \ No newline at end of file