diff --git a/dev-role.yaml b/dev-role.yaml index 743e087..f643438 100644 --- a/dev-role.yaml +++ b/dev-role.yaml @@ -1,8 +1,8 @@ kind: Role apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: - namespace: development - name: developer + namespace: staff + name: staff rules: - apiGroups: ["", "extensions", "apps"] resources: ["deployments", "replicasets", "pods"] diff --git a/rolebind.yaml b/rolebind.yaml index a4893e3..69c9c16 100644 --- a/rolebind.yaml +++ b/rolebind.yaml @@ -1,13 +1,13 @@ kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1beta1 metadata: - name: developer-role-binding - namespace: development + name: staff-role-binding + namespace: staff subjects: - kind: User name: anna apiGroup: "" roleRef: kind: Role - name: developer + name: staff apiGroup: "" diff --git a/rolebindstudents.yaml b/rolebindstudents.yaml new file mode 100644 index 0000000..a3970f6 --- /dev/null +++ b/rolebindstudents.yaml @@ -0,0 +1,13 @@ +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1beta1 +metadata: + name: students-role-binding + namespace: students +subjects: +- kind: User + name: anna + apiGroup: "" +roleRef: + kind: Role + name: students + apiGroup: "" diff --git a/students-role.yaml b/students-role.yaml new file mode 100644 index 0000000..0e7bec2 --- /dev/null +++ b/students-role.yaml @@ -0,0 +1,10 @@ +kind: Role +apiVersion: rbac.authorization.k8s.io/v1beta1 +metadata: + namespace: students + name: students +rules: +- apiGroups: ["", "extensions", "apps"] + resources: ["deployments", "replicasets", "pods"] + verbs: ["list", "get", "watch"] +