Migrates RBAC to Kustomize

base/kustomization.yaml

@@ -1,10 +1,13 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
+namespace: logging
+
 commonLabels:
   app.kubernetes.io/name: fluent-bit
 
 resources:
+- ../rbac
 - fluent-bit-daemonset.yaml
 
 configMapGenerator:

fluent-bit-role.yaml → rbac/fluent-bit-role.yaml

@@ -1,4 +1,4 @@
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: fluent-bit-read

fluent-bit-role-binding.yaml → rbac/fluent-bit-rolebinding.yaml

@@ -1,4 +1,4 @@
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: fluent-bit-read
@@ -9,4 +9,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: fluent-bit
-  namespace: logging
+  # set by Kustomize: namespace:

fluent-bit-service-account.yaml → rbac/fluent-bit-serviceaccount.yaml

@@ -2,4 +2,3 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: fluent-bit
-  namespace: logging

rbac/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- fluent-bit-serviceaccount.yaml
+- fluent-bit-role.yaml
+- fluent-bit-rolebinding.yaml