github.com/abayer/test-infra@v0.0.5/prow/cluster/deck_rbac.yaml (about) 1 apiVersion: v1 2 kind: ServiceAccount 3 metadata: 4 name: "deck" 5 --- 6 kind: Role 7 apiVersion: rbac.authorization.k8s.io/v1beta1 8 metadata: 9 name: "deck" 10 rules: 11 - apiGroups: 12 - "" 13 resources: 14 - pods/log 15 verbs: 16 - get 17 - apiGroups: 18 - "prow.k8s.io" 19 resources: 20 - prowjobs 21 verbs: 22 - get 23 - list 24 --- 25 kind: RoleBinding 26 apiVersion: rbac.authorization.k8s.io/v1beta1 27 metadata: 28 name: "deck" 29 roleRef: 30 apiGroup: rbac.authorization.k8s.io 31 kind: Role 32 name: "deck" 33 subjects: 34 - kind: ServiceAccount 35 name: "deck" 36 --- 37 kind: ClusterRole 38 apiVersion: rbac.authorization.k8s.io/v1beta1 39 metadata: 40 name: "deck-oauth" 41 rules: 42 - apiGroups: 43 - authentication.k8s.io 44 resources: 45 - tokenreviews 46 verbs: 47 - create 48 - apiGroups: 49 - authorization.k8s.io 50 resources: 51 - subjectaccessreviews 52 verbs: 53 - create 54 --- 55 kind: ClusterRoleBinding 56 apiVersion: rbac.authorization.k8s.io/v1beta1 57 metadata: 58 name: "deck-oauth" 59 roleRef: 60 apiGroup: rbac.authorization.k8s.io 61 kind: ClusterRole 62 name: "deck-oauth" 63 subjects: 64 - kind: ServiceAccount 65 name: "deck" 66 namespace: ci