7.3.2. 为 Grafana 创建服务帐户

流程

1. 为 Grafana 创建 ServiceAccount。此处资源命名为 grafana-serviceaccount。

   apiVersion: v1
   kind: ServiceAccount
   metadata:
     name: grafana-serviceaccount
     labels:
       app: strimzi

   Copy to Clipboard Toggle word wrap

2. 将 ServiceAccount 部署到包含 Kafka 集群的项目中：

   oc apply -f GRAFANA-SERVICEACCOUNT -n MY-PROJECT

   Copy to Clipboard Toggle word wrap

3. 创建一个 ClusterRoleBinding 资源，它将 cluster-monitoring-view 角色分配给 Grafana ServiceAccount。此处资源命名为 grafana-cluster-monitoring-binding。

   apiVersion: rbac.authorization.k8s.io/v1
   kind: ClusterRoleBinding
   metadata:
     name: grafana-cluster-monitoring-binding
     labels:
       app: strimzi
   subjects:
     - kind: ServiceAccount
       name: grafana-serviceaccount
       namespace: MY-PROJECT 

   1

   
   roleRef:
     kind: ClusterRole
     name: cluster-monitoring-view
     apiGroup: rbac.authorization.k8s.io

   Copy to Clipboard Toggle word wrap

   1

   您的项目名称。

4. 将 ClusterRoleBinding 部署到包含 Kafka 集群的项目：

   oc apply -f GRAFANA-CLUSTER-MONITORING-BINDING -n MY-PROJECT

   Copy to Clipboard Toggle word wrap