4 corev1 "k8s.io/api/core/v1"
\r
5 metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
\r
6 "k8s.io/apimachinery/pkg/util/intstr"
\r
9 func GetClusterRoleBinding() []*rbacv1.ClusterRoleBinding {
\r
10 clusterRoleBinding1 := &rbacv1.ClusterRoleBinding{
\r
11 TypeMeta: metav1.TypeMeta{
\r
12 APIVersion: "rbac.authorization.k8s.io/v1",
\r
13 Kind: "ClusterRoleBinding",
\r
15 ObjectMeta: metav1.ObjectMeta{
\r
16 Name: "svcacct-ricplt-appmgr-ricxapp-access",
\r
17 Namespace: "ricplt",
\r
19 RoleRef: rbacv1.RoleRef{
\r
20 Kind: "ClusterRole",
\r
21 Name: "svcacct-ricplt-appmgr-ricxapp-access",
\r
22 APIGroup: "rbac.authorization.k8s.io",
\r
24 Subjects: []rbacv1.Subject{
\r
27 Namespace: "ricplt",
\r
28 Kind: "ServiceAccount",
\r
29 Name: "svcacct-ricplt-appmgr",
\r
34 clusterRoleBinding2 := &rbacv1.ClusterRoleBinding{
\r
35 ObjectMeta: metav1.ObjectMeta{
\r
36 Name: "svcacct-ricplt-appmgr-ricxapp-getappconfig",
\r
37 Namespace: "ricxapp",
\r
39 RoleRef: rbacv1.RoleRef{
\r
40 APIGroup: "rbac.authorization.k8s.io",
\r
41 Kind: "ClusterRole",
\r
42 Name: "svcacct-ricplt-appmgr-ricxapp-getappconfig",
\r
44 Subjects: []rbacv1.Subject{
\r
47 Namespace: "ricplt",
\r
48 Kind: "ServiceAccount",
\r
49 Name: "svcacct-ricplt-appmgr",
\r
52 TypeMeta: metav1.TypeMeta{
\r
53 APIVersion: "rbac.authorization.k8s.io/v1",
\r
54 Kind: "ClusterRoleBinding",
\r
57 return []*rbacv1.ClusterRoleBinding{clusterRoleBinding1, clusterRoleBinding2}
\r