generated from mspnp/aks-baseline
-
Notifications
You must be signed in to change notification settings - Fork 90
/
rbac.yaml
36 lines (36 loc) · 1.02 KB
/
rbac.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
# Mapping k8s user facing roles to Microsoft Entra groups: https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
#apiVersion: rbac.authorization.k8s.io/v1
#kind: RoleBinding
#metadata:
# name: namespace-admin
#roleRef:
# apiGroup: rbac.authorization.k8s.io
# kind: ClusterRole
# name: admin
#subjects:
# - kind: Group
# name: <replace-with-a-microsoft-entra-group-object-id-for-this-namespace-admin-role>
#---
#apiVersion: rbac.authorization.k8s.io/v1
#kind: RoleBinding
#metadata:
# name: namespace-editor
#roleRef:
# apiGroup: rbac.authorization.k8s.io
# kind: ClusterRole
# name: edit
#subjects:
# - kind: Group
# name: <replace-with-a-microsoft-entra-group-object-id-for-this-namespace-edit-role>
#---
#apiVersion: rbac.authorization.k8s.io/v1
#kind: RoleBinding
#metadata:
# name: namespace-viewer
#roleRef:
# apiGroup: rbac.authorization.k8s.io
# kind: ClusterRole
# name: view
#subjects:
# - kind: Group
# name: <replace-with-a-microsoft-entra-group-object-id-for-this-namespace-view-role>