align multicluster service account with istio/installer and istio/ope…

…rator (istio#19551) * align multicluster service account with istio/installer and istio/operator fixes istio#19546 * re-add istio-multi
zhaohuabing · Dec 20, 2019 · 5cef32d · 5cef32d
1 parent c1520ba
commit 5cef32d
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 0 deletions.
diff --git a/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml b/install/kubernetes/helm/istio/templates/clusterrolebinding.yaml
@@ -12,3 +12,18 @@ subjects:
 - kind: ServiceAccount
  name: istio-multi
  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+ name: istio-reader
+ labels:
+ chart: {{ .Chart.Name }}-{{ .Chart.Version }}
+roleRef:
+ apiGroup: rbac.authorization.k8s.io
+ kind: ClusterRole
+ name: istio-reader
+subjects:
+- kind: ServiceAccount
+ name: istio-reader
+ namespace: {{ .Release.Namespace }}
diff --git a/install/kubernetes/helm/istio/templates/serviceaccount.yaml b/install/kubernetes/helm/istio/templates/serviceaccount.yaml
@@ -3,3 +3,9 @@ kind: ServiceAccount
 metadata:
  name: istio-multi
  namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: istio-reader
+ namespace: {{ .Release.Namespace }}