# kube-dns-autoscaler-service-account-rbac.yml --- apiVersion: v1 kind: ServiceAccount metadata: name: kube-dns-autoscaler namespace: kube-system labels: k8s-addon: kube-dns.addons.k8s.io --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRole metadata: labels: k8s-addon: kube-dns.addons.k8s.io name: kube-dns-autoscaler rules: - apiGroups: - "" resources: - nodes verbs: - list - apiGroups: - "" resources: - configmaps verbs: - get - create - update - apiGroups: - "extensions" resources: - deployments/scale verbs: - get - update --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: labels: k8s-addon: kube-dns.addons.k8s.io name: kube-dns-autoscaler roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: kube-dns-autoscaler subjects: - apiGroup: rbac.authorization.k8s.io kind: User name: system:serviceaccount:kube-system:kube-dns-autoscaler