github.com/zppinho/prow@v0.0.0-20240510014325-1738badeb017/test/integration/config/prow/cluster/prow_controller_manager_rbac.yaml (about)

     1  # Copyright 2020 The Kubernetes Authors All rights reserved.
     2  #
     3  # Licensed under the Apache License, Version 2.0 (the "License");
     4  # you may not use this file except in compliance with the License.
     5  # You may obtain a copy of the License at
     6  #
     7  #     http://www.apache.org/licenses/LICENSE-2.0
     8  #
     9  # Unless required by applicable law or agreed to in writing, software
    10  # distributed under the License is distributed on an "AS IS" BASIS,
    11  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    12  # See the License for the specific language governing permissions and
    13  # limitations under the License.
    14  
    15  apiVersion: v1
    16  kind: ServiceAccount
    17  metadata:
    18    namespace: default
    19    name: "prow-controller-manager"
    20  ---
    21  kind: Role
    22  apiVersion: rbac.authorization.k8s.io/v1
    23  metadata:
    24    namespace: default
    25    name: "prow-controller-manager"
    26  rules:
    27  - apiGroups:
    28    - coordination.k8s.io
    29    resources:
    30    - leases
    31    resourceNames:
    32    - prow-controller-manager-leader-lock
    33    verbs:
    34    - get
    35    - update
    36  - apiGroups:
    37    - coordination.k8s.io
    38    resources:
    39    - leases
    40    verbs:
    41    - create
    42  - apiGroups:
    43    - ""
    44    resources:
    45    - configmaps
    46    resourceNames:
    47    - prow-controller-manager-leader-lock
    48    verbs:
    49    - get
    50    - update
    51  - apiGroups:
    52    - ""
    53    resources:
    54    - configmaps
    55    - events
    56    verbs:
    57    - create
    58  - apiGroups:
    59    - prow.k8s.io
    60    resources:
    61    - prowjobs
    62    verbs:
    63    - get
    64    - update
    65    - list
    66    - watch
    67    - patch
    68  ---
    69  kind: Role
    70  apiVersion: rbac.authorization.k8s.io/v1
    71  metadata:
    72    namespace: test-pods
    73    name: "prow-controller-manager"
    74  rules:
    75  - apiGroups:
    76     - ""
    77    resources:
    78    - pods
    79    verbs:
    80    - create
    81    - delete
    82    - list
    83    - watch
    84    - get
    85    - patch
    86  ---
    87  kind: RoleBinding
    88  apiVersion: rbac.authorization.k8s.io/v1
    89  metadata:
    90    namespace: default
    91    name: "prow-controller-manager"
    92  roleRef:
    93    apiGroup: rbac.authorization.k8s.io
    94    kind: Role
    95    name: "prow-controller-manager"
    96  subjects:
    97  - kind: ServiceAccount
    98    name: "prow-controller-manager"
    99  ---
   100  kind: RoleBinding
   101  apiVersion: rbac.authorization.k8s.io/v1
   102  metadata:
   103    namespace: test-pods
   104    name: "prow-controller-manager"
   105  roleRef:
   106    apiGroup: rbac.authorization.k8s.io
   107    kind: Role
   108    name: "prow-controller-manager"
   109  subjects:
   110  - kind: ServiceAccount
   111    name: "prow-controller-manager"
   112    namespace: default