Initial commit

2021-04-20 00:36:44 +02:00
commit aa671d7c8d
9 changed files with 334 additions and 0 deletions
--- a/templates/serivceaccount.yaml
+++ b/templates/serivceaccount.yaml
@@ -0,0 +1,30 @@
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: job-orchestrator-role
+rules:
+ - apiGroups: [""]
+   resources: ["pods"]
+   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: job-orchestrator-role-binding
+subjects:
+ - kind: ServiceAccount
+   name: job-orchestrator-account
+roleRef:
+  kind: Role
+  name: job-orchestrator-role
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: job-orchestrator-account
+{{ if eq .Values.k8s.use_regcred true }}
+imagePullSecrets:
+ - name: {{ .Values.k8s.regcred_name }}
+{{ end }}