rbac.md

Setting up RBAC for Bookkeeper operator

Use non-default service accounts

You can optionally configure non-default service accounts for the Bookkeeper.

For Bookkeeper, set the serviceAccountName field under the spec block.

...
spec:
  serviceAccountName: bk-service-account
...

Replace the namespace with your own namespace.

Installing on a Custom Namespace with RBAC enabled

Create the namespace.

$ kubectl create namespace pravega-io

Update the namespace configured in the deploy/role_binding.yaml file.

$ sed -i -e 's/namespace: default/namespace: pravega-io/g' deploy/role_binding.yaml

Apply the changes.

$ kubectl -n pravega-io apply -f deploy

$ kubectl -n pravega-io create -f example/cr-detailed.yaml

$ kubectl -n pravega-io get bk
NAME         AGE
bookkeeper   28m

$ kubectl -n pravega-io get pods -l bookkeeper_cluster=bookkeeper
NAME                                             READY     STATUS    RESTARTS   AGE
bookkeeper-bookie-0                              1/1       Running   0          29m
bookkeeper-bookie-1                              1/1       Running   0          29m
bookkeeper-bookie-2                              1/1       Running   0          29m