Merge pull request #9 from stakater/add-rbac

[STK-114] Add rbac

README.md

@@ -56,6 +56,8 @@ kubectl apply -f rbac.yaml -n <namespace>
 kubectl apply -f deployment.yaml -n <namespace>
 ```
 
+*Note*: Before applying rbac.yaml, You need to modify the namespace in the `RoleBinding` subjects section to the namespace you want to apply rbac.yaml to.
+
 ## Adding support for a new Monitor
 
 You can easily implement a new monitor and use it via the controller. First of all, you will need to create a new service struct that implements the following monitor service interface

bootstrap.sh

@@ -15,4 +15,4 @@ echo "Building the controller"
 go build -o ./out/main
 
 echo "Running the controller"
-./main
+./out/main

kubernetes-manifests/deployment.yaml

@@ -28,20 +28,12 @@ spec:
               fieldPath: metadata.namespace
         - name: CONFIG_FILE_PATH
           value: /etc/ingress-monitor-controller/config.yaml
-# TODO: Update name
-        image: stakater/ingress-monitor-controller:implementation
-        imagePullPolicy: Always
-#       livenessProbe:
-#          exec:
-#            command:
-#            - cat
-#            - /tmp/restarteveryday
-#          initialDelaySeconds: 86164
+        image: stakater/ingress-monitor-controller:0.1
         name: ingress-monitor-controller
         volumeMounts:
         - mountPath: /etc/ingress-monitor-controller
           name: config-volume
-#      serviceAccountName: ingress-monitor-controller-svcaccount
+      serviceAccountName: ingressmonitorcontroller
       volumes:
       - configMap:
           name: ingress-monitor-controller

kubernetes-manifests/rbac.yaml

@@ -1 +1,38 @@
-# Placeholder
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    project: ingressmonitorcontroller
+    group: com.stakater
+  name: ingressmonitorcontroller
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: Role
+metadata:
+  name: ingressmonitorcontroller-role
+rules:
+  - apiGroups:
+      - ""
+      - "extensions"
+    resources:
+      - ingresses
+    verbs:
+      - list
+      - get
+      - update
+      - patch
+      - watch
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+  name: ingressmonitorcontroller-role-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ingressmonitorcontroller-role
+subjects:
+  - kind: ServiceAccount
+    name: ingressmonitorcontroller
+    namespace: test