✨ feat:update nic-uio-binder to 1.0.12

ansible/install_config/group_vars/rpm_version.yml

@@ -107,7 +107,7 @@ packet_adapter_rpm_version:
   packet_adapter: packet_adapter-2.0.2.4f48b59
 
 nic_uio_binder_rpm_version:
-  nic_uio_binder: nic-uio-binder-1.0.11-08f054a
+  nic_uio_binder: nic-uio-binder-1.0.12-8662f3e.x86_64
 
 dp_trace_rpm_version:
   dp_trace: dp_trace_telemetry-0.2.1.c48d240

ansible/roles/k3s-install/files/nic-uio-binder.yaml

@@ -1,3 +1,78 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: nic-uio-binder-account
+  namespace: tsg-os-system
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: nic-uio-binder-account-nodes
+rules:
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: nic-uio-binder-account-pods
+rules:
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get","list","patch","watch","update","create","delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: nic-uio-binder-account-services
+rules:
+- apiGroups: [""]
+  resources: ["endpoints", "services"]
+  verbs: ["get","list","watch","update","create","delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: nic-uio-binder-account-binding-nodes
+subjects:
+  - kind: ServiceAccount
+    namespace: tsg-os-system
+    name: nic-uio-binder-account
+    apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: nic-uio-binder-account-nodes
+  apiGroup: ""
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: nic-uio-binder-account-binding-pods
+subjects:
+  - kind: ServiceAccount
+    namespace: tsg-os-system
+    name: nic-uio-binder-account
+    apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: nic-uio-binder-account-pods
+  apiGroup: ""
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: nic-uio-binder-account-binding-services
+subjects:
+- kind: ServiceAccount
+  namespace: tsg-os-system
+  name: nic-uio-binder-account
+  apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: nic-uio-binder-account-services
+  apiGroup: ""
+---
 apiVersion: apps/v1
 kind: DaemonSet
 metadata:
@@ -14,6 +89,7 @@ spec:
       labels:
         app: nic-uio-binder
     spec:
+      serviceAccountName: nic-uio-binder-account
       containers:
       - name: nic-uio-binder
         image: registry.gdnt-cloud.website/tsg-nic-uio-binder:%%NIC_UIO_BINDER_IMAGE_TAR%%