feat: add cluster role and role binding (#14138)

airbytehq · Sep 26, 2024 · ead22e9 · ead22e9
1 parent ebbd873
commit ead22e9
Showing 1 changed file with 22 additions and 0 deletions.
diff --git a/charts/airbyte/templates/serviceaccount.yaml b/charts/airbyte/templates/serviceaccount.yaml
@@ -47,5 +47,27 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: {{ include "airbyte.serviceAccountName" . }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: node-viewer
+rules:
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "airbyte.serviceAccountName" . }}-admin-node-viewer
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "airbyte.serviceAccountName" . }}
+    namespace: ab
+roleRef:
+  kind: ClusterRole
+  name: node-viewer
+  apiGroup: rbac.authorization.k8s.io
 {{- end }}
 {{- end }}