Change Role to ClusterRole for dns internal check
@@ -60,23 +60,9 @@ spec:
serviceAccountName: dns-internal-sa
---
apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRole
metadata:
- name: dns-internal-check-rb
- namespace: {{ .Release.Namespace }}
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: Role
- name: dns-internal-service-role
-subjects:
- - kind: ServiceAccount
- name: dns-internal-sa
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
- name: dns-internal-service-role
- namespace: {{ .Release.Namespace }}
+ name: dns-internal-service-cr
rules:
- apiGroups:
- ""
@@ -85,6 +71,19 @@ rules:
verbs:
- get
---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: dns-internal-service-crb
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: dns-internal-service-cr
+subjects:
+ - kind: ServiceAccount
+ name: dns-internal-sa
+ namespace: {{ .Release.Namespace }}
+---
apiVersion: v1
kind: ServiceAccount
metadata:
