Function CreateRoleBinding

pkg/specs/rolebinding.go:31–54

CreateRoleBinding is the binding between the permissions that the instance manager can use and the ServiceAccount used by the Pod

(objectMeta metav1.ObjectMeta, serviceAccountName string)

// CreateRoleBinding is the binding between the permissions that the instance manager can use
// and the ServiceAccount used by the Pod
func CreateRoleBinding(objectMeta metav1.ObjectMeta, serviceAccountName string) rbacv1.RoleBinding {
	return rbacv1.RoleBinding{
		ObjectMeta: metav1.ObjectMeta{
			Namespace: objectMeta.Namespace,
			Name:      objectMeta.Name,
			Labels: map[string]string{
				utils.KubernetesAppManagedByLabelName: utils.ManagerName,
			},
		},
		Subjects: []rbacv1.Subject{
			{
				Kind:      "ServiceAccount",
				APIGroup:  "",
				Name:      serviceAccountName,
				Namespace: objectMeta.Namespace,
			},
		},
		RoleRef: rbacv1.RoleRef{
			APIGroup: "rbac.authorization.k8s.io",
			Kind:     "Role",
			Name:     objectMeta.Name,
		},
	}
}