github.com/zppinho/prow@v0.0.0-20240510014325-1738badeb017/test/integration/config/prow/cluster/sinker_rbac.yaml (about)

     1  apiVersion: v1
     2  kind: ServiceAccount
     3  metadata:
     4    namespace: default
     5    name: "sinker"
     6  ---
     7  kind: Role
     8  apiVersion: rbac.authorization.k8s.io/v1
     9  metadata:
    10    namespace: default
    11    name: "sinker"
    12  rules:
    13    - apiGroups:
    14      - "prow.k8s.io"
    15      resources:
    16      - prowjobs
    17      verbs:
    18      - delete
    19      - list
    20      - watch
    21      - get
    22    - apiGroups:
    23      - coordination.k8s.io
    24      resources:
    25      - leases
    26      resourceNames:
    27      - prow-sinker-leaderlock
    28      verbs:
    29      - get
    30      - update
    31    - apiGroups:
    32      - coordination.k8s.io
    33      resources:
    34      - leases
    35      verbs:
    36      - create
    37    - apiGroups:
    38      - ""
    39      resources:
    40      - configmaps
    41      resourceNames:
    42      - prow-sinker-leaderlock
    43      verbs:
    44      - get
    45      - update
    46    - apiGroups:
    47      - ""
    48      resources:
    49      - configmaps
    50      - events
    51      verbs:
    52      - create
    53  ---
    54  kind: Role
    55  apiVersion: rbac.authorization.k8s.io/v1
    56  metadata:
    57    namespace: test-pods
    58    name: "sinker"
    59  rules:
    60    - apiGroups:
    61        - ""
    62      resources:
    63        - pods
    64      verbs:
    65        - delete
    66        - list
    67        - watch
    68        - get
    69        - patch
    70  ---
    71  kind: RoleBinding
    72  apiVersion: rbac.authorization.k8s.io/v1
    73  metadata:
    74    namespace: default
    75    name: "sinker"
    76  roleRef:
    77    apiGroup: rbac.authorization.k8s.io
    78    kind: Role
    79    name: "sinker"
    80  subjects:
    81  - kind: ServiceAccount
    82    name: "sinker"
    83  ---
    84  kind: RoleBinding
    85  apiVersion: rbac.authorization.k8s.io/v1
    86  metadata:
    87    namespace: test-pods
    88    name: "sinker"
    89  roleRef:
    90    apiGroup: rbac.authorization.k8s.io
    91    kind: Role
    92    name: "sinker"
    93  subjects:
    94  - kind: ServiceAccount
    95    name: "sinker"
    96    namespace: default