github.com/yrj2011/jx-test-infra@v0.0.0-20190529031832-7a2065ee98eb/prow/cluster/deck_rbac.yaml (about)

     1  apiVersion: v1
     2  kind: ServiceAccount
     3  metadata:
     4    name: "deck"
     5  ---
     6  kind: Role
     7  apiVersion: rbac.authorization.k8s.io/v1beta1
     8  metadata:
     9    name: "deck"
    10  rules:
    11    - apiGroups:
    12        - ""
    13      resources:
    14        - pods/log
    15      verbs:
    16        - get
    17    - apiGroups:
    18        - "prow.k8s.io"
    19      resources:
    20        - prowjobs
    21      verbs:
    22        - get
    23        - list
    24  ---
    25  kind: RoleBinding
    26  apiVersion: rbac.authorization.k8s.io/v1beta1
    27  metadata:
    28    name: "deck"
    29  roleRef:
    30    apiGroup: rbac.authorization.k8s.io
    31    kind: Role
    32    name: "deck"
    33  subjects:
    34  - kind: ServiceAccount
    35    name: "deck"
    36  ---
    37  kind: ClusterRole
    38  apiVersion: rbac.authorization.k8s.io/v1beta1
    39  metadata:
    40    name: "deck-oauth"
    41  rules:
    42    - apiGroups:
    43      - authentication.k8s.io
    44      resources:
    45      - tokenreviews
    46      verbs:
    47      - create
    48    - apiGroups:
    49      - authorization.k8s.io
    50      resources:
    51      - subjectaccessreviews
    52      verbs:
    53      - create
    54  ---
    55  kind: ClusterRoleBinding
    56  apiVersion: rbac.authorization.k8s.io/v1beta1
    57  metadata:
    58    name: "deck-oauth"
    59  roleRef:
    60    apiGroup: rbac.authorization.k8s.io
    61    kind: ClusterRole
    62    name: "deck-oauth"
    63  subjects:
    64  - kind: ServiceAccount
    65    name: "deck"
    66    namespace: ci