github.com/zppinho/prow@v0.0.0-20240510014325-1738badeb017/test/integration/config/prow/cluster/crier_rbac.yaml (about)

     1  # Copyright 2019 The Kubernetes Authors All rights reserved.
     2  #
     3  # Licensed under the Apache License, Version 2.0 (the "License");
     4  # you may not use this file except in compliance with the License.
     5  # You may obtain a copy of the License at
     6  #
     7  #     http://www.apache.org/licenses/LICENSE-2.0
     8  #
     9  # Unless required by applicable law or agreed to in writing, software
    10  # distributed under the License is distributed on an "AS IS" BASIS,
    11  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    12  # See the License for the specific language governing permissions and
    13  # limitations under the License.
    14  
    15  ---
    16  kind: ServiceAccount
    17  apiVersion: v1
    18  metadata:
    19    annotations:
    20      iam.gke.io/gcp-service-account: control-plane@k8s-prow.iam.gserviceaccount.com
    21    name: crier
    22    namespace: default
    23  ---
    24  kind: Role
    25  apiVersion: rbac.authorization.k8s.io/v1
    26  metadata:
    27    namespace: default
    28    name: crier
    29  rules:
    30  - apiGroups:
    31      - "prow.k8s.io"
    32    resources:
    33      - "prowjobs"
    34    verbs:
    35      - "get"
    36      - "watch"
    37      - "list"
    38      - "patch"
    39  ---
    40  kind: Role
    41  apiVersion: rbac.authorization.k8s.io/v1
    42  metadata:
    43    namespace: test-pods
    44    name: crier
    45  rules:
    46  - apiGroups:
    47      - ""
    48    resources:
    49      - "pods"
    50      - "events"
    51    verbs:
    52      - "get"
    53      - "list"
    54  - apiGroups:
    55      - ""
    56    resources:
    57      - "pods"
    58    verbs:
    59      - "patch"
    60  ---
    61  kind: RoleBinding
    62  apiVersion: rbac.authorization.k8s.io/v1
    63  metadata:
    64    name: crier-namespaced
    65    namespace: default
    66  roleRef:
    67    apiGroup: rbac.authorization.k8s.io
    68    kind: Role
    69    name: crier
    70  subjects:
    71  - kind: ServiceAccount
    72    name: crier
    73    namespace: default
    74  ---
    75  kind: RoleBinding
    76  apiVersion: rbac.authorization.k8s.io/v1
    77  metadata:
    78    name: crier-namespaced
    79    namespace: test-pods
    80  roleRef:
    81    apiGroup: rbac.authorization.k8s.io
    82    kind: Role
    83    name: crier
    84  subjects:
    85  - kind: ServiceAccount
    86    name: crier
    87    namespace: default