k8s.io/test-infra@v0.0.0-20240520184403-27c6b4c223d8/config/prow/experimental/controller_manager.yaml (about)

     1  apiVersion: apps/v1
     2  kind: Deployment
     3  metadata:
     4    namespace: default
     5    name: prow-controller-manager
     6    labels:
     7      app: prow-controller-manager
     8  spec:
     9    replicas: 1
    10    selector:
    11      matchLabels:
    12        app: prow-controller-manager
    13    template:
    14      metadata:
    15        labels:
    16          app: prow-controller-manager
    17      spec:
    18        serviceAccountName: prow-controller-manager
    19        containers:
    20        - name: prow-controller-manager
    21          args:
    22          - --config-path=/etc/config/config.yaml
    23          - --job-config-path=/etc/job-config
    24          - --dry-run=false
    25          image: gcr.io/k8s-prow/prow-controller-manager:v20240517-ea10bd814
    26          volumeMounts:
    27          - name: config
    28            mountPath: /etc/config
    29            readOnly: true
    30          - name: job-config
    31            mountPath: /etc/job-config
    32            readOnly: true
    33        volumes:
    34        - name: config
    35          configMap:
    36            name: config
    37        - name: job-config
    38          configMap:
    39            name: job-config
    40  ---
    41  apiVersion: v1
    42  kind: ServiceAccount
    43  metadata:
    44    namespace: default
    45    name: prow-controller-manager
    46  ---
    47  kind: Role
    48  apiVersion: rbac.authorization.k8s.io/v1
    49  metadata:
    50    namespace: default
    51    name: prow-controller-manager
    52  rules:
    53    - apiGroups:
    54        - "prow.k8s.io"
    55      resources:
    56        - prowjobs
    57      verbs:
    58        - get
    59        - list
    60        - watch
    61        - update
    62        - patch
    63    - apiGroups:
    64        - ""
    65      resources:
    66        - configmaps
    67      resourceNames:
    68        - prow-controller-manager-leader-lock
    69      verbs:
    70        - get
    71        - update
    72    - apiGroups:
    73        - ""
    74      resources:
    75        - configmaps
    76        - events
    77      verbs:
    78        - create
    79  ---
    80  kind: Role
    81  apiVersion: rbac.authorization.k8s.io/v1
    82  metadata:
    83    namespace: test-pods
    84    name: prow-controller-manager
    85  rules:
    86    - apiGroups:
    87        - ""
    88      resources:
    89        - pods
    90      verbs:
    91        - create
    92        - delete
    93        - get
    94        - list
    95        - patch
    96        - watch
    97  ---
    98  kind: RoleBinding
    99  apiVersion: rbac.authorization.k8s.io/v1
   100  metadata:
   101    namespace: default
   102    name: prow-controller-manager
   103  roleRef:
   104    apiGroup: rbac.authorization.k8s.io
   105    kind: Role
   106    name: prow-controller-manager
   107  subjects:
   108  - kind: ServiceAccount
   109    name: prow-controller-manager
   110  ---
   111  kind: RoleBinding
   112  apiVersion: rbac.authorization.k8s.io/v1
   113  metadata:
   114    namespace: test-pods
   115    name: prow-controller-manager
   116  roleRef:
   117    apiGroup: rbac.authorization.k8s.io
   118    kind: Role
   119    name: prow-controller-manager
   120  subjects:
   121  - kind: ServiceAccount
   122    name: prow-controller-manager
   123    namespace: default