install: create a RoleBinding for obtain delegated authentication

kubernetes-sigs · Jan 10, 2022 · 9ad010a · 9ad010a
1 parent 1eb73e1
commit 9ad010a
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/manifests/install/charts/as-a-second-scheduler/templates/rbac.yaml b/manifests/install/charts/as-a-second-scheduler/templates/rbac.yaml
@@ -97,4 +97,21 @@ roleRef:
   kind: ClusterRole
   name: scheduler-plugins-controller
   apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: sched-plugins::extension-apiserver-authentication-reader
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: extension-apiserver-authentication-reader
+subjects:
+- kind: ServiceAccount
+  name: {{ .Values.scheduler.name }}
+  namespace: {{ .Values.scheduler.namespace }}
+- kind: ServiceAccount
+  name: {{ .Values.controller.name }}
+  namespace: {{ .Values.controller.namespace }}