1+ apiVersion : rbac.authorization.k8s.io/v1
2+ kind : ClusterRole
3+ metadata :
4+ name : {{ .Values.scheduler.name }}-plugins
5+ rules :
6+ {{- /* resources need to be updated with the scheduler plugins used */}}
7+ {{- range .Values.plugins.enabled }}
8+ {{- if eq .name "ResourceFungibility" }}
9+ - apiGroups : [ "llmaz.io" ]
10+ resources : [ "openmodels" ]
11+ verbs : [ "get" ]
12+ {{- end }}
13+ {{- end }}
14+ ---
15+ kind : ClusterRoleBinding
16+ apiVersion : rbac.authorization.k8s.io/v1
17+ metadata :
18+ name : {{ .Values.scheduler.name }}-plugins
19+ roleRef :
20+ apiGroup : rbac.authorization.k8s.io
21+ kind : ClusterRole
22+ name : {{ .Values.scheduler.name }}-plugins
23+ subjects :
24+ - kind : ServiceAccount
25+ name : {{ .Values.scheduler.name }}
26+ namespace : {{ .Release.Namespace }}
27+ ---
28+ kind : ClusterRoleBinding
29+ apiVersion : rbac.authorization.k8s.io/v1
30+ metadata :
31+ name : {{ .Values.scheduler.name }}-kube-scheduler
32+ roleRef :
33+ apiGroup : rbac.authorization.k8s.io
34+ kind : ClusterRole
35+ name : system:kube-scheduler
36+ subjects :
37+ - kind : ServiceAccount
38+ name : {{ .Values.scheduler.name }}
39+ namespace : {{ .Release.Namespace }}
40+ ---
41+ apiVersion : rbac.authorization.k8s.io/v1
42+ kind : ClusterRoleBinding
43+ metadata :
44+ name : {{ .Values.scheduler.name }}-kube-scheduler-volume-scheduler
45+ roleRef :
46+ apiGroup : rbac.authorization.k8s.io
47+ kind : ClusterRole
48+ name : system:volume-scheduler
49+ subjects :
50+ - kind : ServiceAccount
51+ name : {{ .Values.scheduler.name }}
52+ namespace : {{ .Release.Namespace }}
53+ ---
54+ apiVersion : rbac.authorization.k8s.io/v1
55+ kind : RoleBinding
56+ metadata :
57+ name : {{ .Values.scheduler.name }}-extension-apiserver-authentication-reader
58+ namespace : kube-system
59+ roleRef :
60+ apiGroup : rbac.authorization.k8s.io
61+ kind : Role
62+ name : extension-apiserver-authentication-reader
63+ subjects :
64+ - kind : ServiceAccount
65+ name : {{ .Values.scheduler.name }}
66+ namespace : {{ .Release.Namespace }}
0 commit comments