kubespray/roles/network_plugin/canal/templates/canal-crb-flannel.yml.j2

---
# Bind the flannel ClusterRole to the canal ServiceAccount.
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: canal-flannel
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flannel
subjects:
- kind: ServiceAccount
  name: canal
  namespace: kube-system
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 16:29:40 +08:00			`---`
			`# Bind the flannel ClusterRole to the canal ServiceAccount.`
			`kind: ClusterRoleBinding`
update rbac.authorization.k8s.io to non deprecated api-groups (#5517) 2020-04-15 04:14:04 +08:00			`apiVersion: rbac.authorization.k8s.io/v1`
Add RBAC support for canal (#1604) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller 2017-09-04 16:29:40 +08:00			`metadata:`
			`name: canal-flannel`
			`roleRef:`
			`apiGroup: rbac.authorization.k8s.io`
			`kind: ClusterRole`
			`name: flannel`
			`subjects:`
			`- kind: ServiceAccount`
			`name: canal`
Stop templating kube-system namespace and creating it (#2545) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it. 2018-03-30 19:29:13 +08:00			`namespace: kube-system`