apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "cnpg-mcp.fullname" . }}-cnpg-view
namespace: {{ .Release.Namespace }}
labels:
{{- include "cnpg-mcp.labels" . | nindent 4 }}
subjects:
- kind: ServiceAccount
name: {{ include "cnpg-mcp.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
roleRef:
kind: ClusterRole
name: cnpg-cloudnative-pg-view
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "cnpg-mcp.fullname" . }}-cnpg-edit
namespace: {{ .Release.Namespace }}
labels:
{{- include "cnpg-mcp.labels" . | nindent 4 }}
subjects:
- kind: ServiceAccount
name: {{ include "cnpg-mcp.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
roleRef:
kind: ClusterRole
name: cnpg-cloudnative-pg-edit
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ include "cnpg-mcp.fullname" . }}-secrets
namespace: {{ .Release.Namespace }}
labels:
{{- include "cnpg-mcp.labels" . | nindent 4 }}
rules:
- apiGroups: [""]
resources: ["secrets"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "cnpg-mcp.fullname" . }}-secrets
namespace: {{ .Release.Namespace }}
labels:
{{- include "cnpg-mcp.labels" . | nindent 4 }}
subjects:
- kind: ServiceAccount
name: {{ include "cnpg-mcp.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
roleRef:
kind: Role
name: {{ include "cnpg-mcp.fullname" . }}-secrets
apiGroup: rbac.authorization.k8s.io
