k8s.io/test-infra@v0.0.0-20240520184403-27c6b4c223d8/config/prow/cluster/build/grandmatriarch.yaml (about)

     1  apiVersion: v1
     2  kind: ServiceAccount
     3  metadata:
     4    annotations:
     5      # TODO(fejta): consider a better project, but this is what service-account uses now
     6      iam.gke.io/gcp-service-account: pr-kubekins@kubernetes-jenkins-pull.iam.gserviceaccount.com
     7    name: grandmatriarch
     8    namespace: test-pods
     9  ---
    10  kind: Role
    11  apiVersion: rbac.authorization.k8s.io/v1
    12  metadata:
    13    name: grandmatriarch
    14    namespace: test-pods
    15  rules:
    16  - apiGroups:
    17    - ""
    18    resources:
    19    - secrets
    20    verbs:
    21    - create
    22    - get
    23    - update
    24  ---
    25  
    26  kind: RoleBinding
    27  apiVersion: rbac.authorization.k8s.io/v1
    28  metadata:
    29    name: grandmatriarch
    30    namespace: test-pods
    31  roleRef:
    32    apiGroup: rbac.authorization.k8s.io
    33    kind: Role
    34    name: grandmatriarch
    35  subjects:
    36  - kind: ServiceAccount
    37    name: grandmatriarch
    38  ---
    39  apiVersion: apps/v1
    40  kind: Deployment
    41  metadata:
    42    name: grandmatriarch
    43    namespace: test-pods
    44    labels:
    45      app: grandmatriarch
    46  spec:
    47    replicas: 1
    48    selector:
    49      matchLabels:
    50        app: grandmatriarch
    51    template:
    52      metadata:
    53        labels:
    54          app: grandmatriarch
    55      spec:
    56        serviceAccountName: grandmatriarch
    57        containers:
    58        - name: bakery
    59          image: gcr.io/k8s-prow/grandmatriarch:v20240517-ea10bd814
    60          args:
    61          - http-cookiefile