Add service-account to be used during a TaskRun.
Showing
2 changed files
with
33 additions
and
0 deletions
... | @@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 | ... | @@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 |
2 | kind: Kustomization | 2 | kind: Kustomization |
3 | 3 | ||
4 | resources: | 4 | resources: |
5 | - ./service-account.yaml | ||
5 | - ./task-postgresql-pod.yaml | 6 | - ./task-postgresql-pod.yaml |
6 | 7 | ||
7 | configMapGenerator: | 8 | configMapGenerator: | ... | ... |
service-account.yaml
0 → 100644
1 | --- | ||
2 | apiVersion: v1 | ||
3 | kind: ServiceAccount | ||
4 | metadata: | ||
5 | name: task-postgresql-pod-sa | ||
6 | --- | ||
7 | apiVersion: rbac.authorization.k8s.io/v1 | ||
8 | kind: Role | ||
9 | metadata: | ||
10 | name: task-postgresql-pod-sa | ||
11 | rules: | ||
12 | - apiGroups: | ||
13 | - "" | ||
14 | resources: | ||
15 | - pods | ||
16 | - services | ||
17 | verbs: | ||
18 | - create | ||
19 | --- | ||
20 | apiVersion: rbac.authorization.k8s.io/v1 | ||
21 | kind: RoleBinding | ||
22 | metadata: | ||
23 | name: task-postgresql-pod-sa | ||
24 | subjects: | ||
25 | - kind: ServiceAccount | ||
26 | name: task-postgresql-pod-sa | ||
27 | roleRef: | ||
28 | kind: Role | ||
29 | name: task-postgresql-pod-sa | ||
30 | apiGroup: rbac.authorization.k8s.io | ||
31 | --- | ||
32 |
-
Please register or sign in to post a comment