f3c5b19f by Adam Heath

Add service-account to be used during a TaskRun.

1 parent 58353b7f
...@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 ...@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
2 kind: Kustomization 2 kind: Kustomization
3 3
4 resources: 4 resources:
5 - ./service-account.yaml
5 - ./task-postgresql-pod.yaml 6 - ./task-postgresql-pod.yaml
6 7
7 configMapGenerator: 8 configMapGenerator:
......
1 ---
2 apiVersion: v1
3 kind: ServiceAccount
4 metadata:
5 name: task-postgresql-pod-sa
6 ---
7 apiVersion: rbac.authorization.k8s.io/v1
8 kind: Role
9 metadata:
10 name: task-postgresql-pod-sa
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - pods
16 - services
17 verbs:
18 - create
19 ---
20 apiVersion: rbac.authorization.k8s.io/v1
21 kind: RoleBinding
22 metadata:
23 name: task-postgresql-pod-sa
24 subjects:
25 - kind: ServiceAccount
26 name: task-postgresql-pod-sa
27 roleRef:
28 kind: Role
29 name: task-postgresql-pod-sa
30 apiGroup: rbac.authorization.k8s.io
31 ---
32