diff --git a/deployment/polaris-rbac.yaml b/deployment/polaris-rbac.yaml deleted file mode 100644 index a3b3629..0000000 --- a/deployment/polaris-rbac.yaml +++ /dev/null @@ -1,28 +0,0 @@ -# RBAC to allow authenticated users to proxy to the Polaris dashboard service. -# The polaris plugin reads audit data via the Kubernetes service proxy: -# /api/v1/namespaces/polaris/services/http:polaris-dashboard:80/proxy/results.json -# Without this Role + RoleBinding, users get a 403 when Headlamp proxies the request. -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: polaris-dashboard-proxy-reader - namespace: polaris -rules: - - apiGroups: [""] - resources: ["services/proxy"] - resourceNames: ["polaris-dashboard", "http:polaris-dashboard:80"] - verbs: ["get"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: polaris-dashboard-proxy-reader - namespace: polaris -subjects: - - kind: Group - name: system:authenticated - apiGroup: rbac.authorization.k8s.io -roleRef: - kind: Role - name: polaris-dashboard-proxy-reader - apiGroup: rbac.authorization.k8s.io