align with openyurt helm charts from commit db3197bf0125bf78fe364448f65a593e21a8fc83

Author: openyurt-bot

charts/yurt-manager/templates/yurt-manager-auto-generated.yaml

@@ -56,6 +56,12 @@ metadata:
 ---
 apiVersion: v1
 kind: ServiceAccount
+metadata:
+  name: yurt-manager-hubleaderrbac-controller
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: v1
+kind: ServiceAccount
 metadata:
   name: yurt-manager-load-balancer-set-controller
   namespace: {{ .Release.Namespace }}
@@ -253,6 +259,13 @@ rules:
   verbs:
   - list
   - watch
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - list
+  - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -476,6 +489,27 @@ rules:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
+metadata:
+  name: yurt-manager-hubleaderrbac-controller
+rules:
+- apiGroups:
+  - apps.openyurt.io
+  resources:
+  - nodepools
+  verbs:
+  - get
+- apiGroups:
+  - rbac.authorization.k8s.io
+  resources:
+  - clusterroles
+  verbs:
+  - create
+  - escalate
+  - get
+  - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
 metadata:
   name: yurt-manager-load-balancer-set-controller
 rules:
@@ -962,6 +996,19 @@ subjects:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
+metadata:
+  name: yurt-manager-hubleaderrbac-controller-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: yurt-manager-hubleaderrbac-controller
+subjects:
+- kind: ServiceAccount
+  name: yurt-manager-hubleaderrbac-controller
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
 metadata:
   name: yurt-manager-load-balancer-set-controller-binding
 roleRef:

charts/yurt-manager/templates/yurt-manager.yaml

@@ -39,6 +39,24 @@ subjects:
   namespace: {{ .Release.Namespace }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: yurt-hub-multiplexer-binding
+subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: openyurt:multiplexer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: yurt-hub-multiplexer
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: yurt-hub-multiplexer
+---
+apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: yurt-manager-webhook-role-binding
@@ -153,4 +171,4 @@ spec:
     {{- if .Values.affinity }}
       affinity: {{ toYaml .Values.affinity | nindent 8 }}
     {{- end }}
----
+---