github.com/munnerz/test-infra@v0.0.0-20190108210205-ce3d181dc989/prow/cmd/build/dev.yaml (about)

     1  kind: Deployment
     2  apiVersion: apps/v1
     3  metadata:
     4    name: prow-build
     5  spec:
     6    replicas: 1
     7    selector:
     8      matchLabels:
     9        app: prow-build
    10    template:
    11      metadata:
    12        labels:
    13          app: prow-build
    14      spec:
    15        serviceAccount: prow-build
    16        containers:
    17        - name: build
    18          image: gcr.io/k8s-testimages/build:latest  # Note: not gcr.io/k8s-prow for dev
    19          imagePullPolicy: Always  # Good practice for dev/debugging, bad for prod
    20          args:
    21          - --tls-cert-file=/etc/tls/tls.crt
    22          - --tls-private-key-file=/etc/tls/tls.key
    23          ports:
    24          - containerPort: 8443
    25            name: validator-http
    26            protocol: TCP
    27          volumeMounts:
    28          - name: tls
    29            mountPath: /etc/tls
    30        volumes:
    31        - name: tls
    32          secret:
    33            secretName: prow-build
    34  ---
    35  
    36  kind: ServiceAccount
    37  apiVersion: v1
    38  metadata:
    39    name: prow-build
    40  ---
    41  
    42  kind: ClusterRole
    43  apiVersion: rbac.authorization.k8s.io/v1
    44  metadata:
    45    name: prow-build
    46  rules:
    47  - apiGroups:
    48    - build.knative.dev
    49    resources:
    50    - builds
    51    verbs:
    52    - create
    53    - delete
    54    - get
    55    - list
    56    - watch
    57  - apiGroups:
    58    - prow.k8s.io
    59    resources:
    60    - prowjobs
    61    - prowjobs/status
    62    verbs:
    63    - get
    64    - list
    65    - watch
    66    - update
    67  
    68  ---
    69  
    70  kind: ClusterRoleBinding
    71  apiVersion: rbac.authorization.k8s.io/v1
    72  metadata:
    73    name: prow-build
    74  roleRef:
    75    apiGroup: rbac.authorization.k8s.io
    76    kind: ClusterRole
    77    name: prow-build
    78  subjects:
    79  - kind: ServiceAccount
    80    name: prow-build
    81    namespace: default
    82  ---
    83  
    84  apiVersion: v1
    85  kind: Service
    86  metadata:
    87    name: prow-build
    88  spec:
    89    ports:
    90    - port: 443
    91      protocol: TCP
    92      targetPort: 8443
    93    selector:
    94      app: prow-build
    95    type: ClusterIP
    96  ---
    97  
    98  apiVersion: admissionregistration.k8s.io/v1beta1
    99  kind: ValidatingWebhookConfiguration
   100  metadata:
   101    name: prow-build
   102  webhooks:
   103  - name: build-validator.prow.k8s.io
   104    failurePolicy: Fail
   105    rules:
   106    - apiGroups:
   107      - prow.k8s.io
   108      apiVersions:
   109      - "*"
   110      operations:
   111      - UPDATE
   112      resources:
   113      - prowjobs
   114    clientConfig:
   115      caBundle: "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"
   116      service:
   117        name: prow-build
   118        namespace: default
   119        path: /validate