創(chuàng)建了一個服務(wù)削锰，需要操作集群钓葫，默認(rèn)權(quán)限無法操作。
RBAC
apiVersion: v1
kind: ServiceAccount
metadata:
name: deploy-manager
namespace: office
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: deploy-manager
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: deploy-manager
namespace: office
deployment
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
creationTimestamp: null
labels:
app: nginx
version: latest
name: nginx
namespace: office
spec:
replicas: 1
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 1
maxUnavailable: 0
minReadySeconds: 3
template:
metadata:
creationTimestamp: null
labels:
app: nginx
version: latest
spec:
containers:
- env:[]
image: nginx:latest
imagePullPolicy: Always
name: nginx
ports:
- containerPort: 80
resources: {}
restartPolicy: Always
serviceAccount: deploy-manager
serviceAccountName: deploy-manager
