apiVersion: v1
kind: ConfigMap
metadata:
  name: kubernetes-dashboard-acl
  namespace: kube-system
  labels:
    app.kubernetes.io/name: kubernetes-dashboard-acl
    app.kubernetes.io/part-of: dashboard
data:
  # The access control list maps users and groups to Kubernetes service accounts.

  # Map specific users
  users: |
    # user1=namespace/serviceaccount
    # user2=serviceaccount-in-default-namespace

  # Map user groups (defined by the configured authentication provider)
  groups: |
    # administrators=kube-system/admin

  # The service account used when no entry in "users" or "groups" matches the authenticated user.
  # Unset this value to explicitly whitelist authorized users
  fallback: kube-system/kubernetes-dashboard
