Update example service-account.yml for container group in documentation (#13479)

Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com>
Co-authored-by: Nana <35573203+masbahnana@users.noreply.github.com>
This commit is contained in:
mcen1 2023-08-02 15:27:18 -04:00 committed by GitHub
parent 6d1c8de4ed
commit 90c3d8a275
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -13,30 +13,35 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: awx
name: containergroup-service-account
namespace: containergroup-namespace
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: pod-manager
name: role-containergroup-service-account
namespace: containergroup-namespace
rules:
- apiGroups: [""] # "" indicates the core API group
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources: ["pods/exec"]
verbs: ["create"]
resources: ["pods/log"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources: ["pods/attach"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: awx-pod-manager
name: role-containergroup-service-account-binding
namespace: containergroup-namespace
subjects:
- kind: ServiceAccount
name: awx
name: containergroup-service-account
namespace: containergroup-namespace
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: pod-manager
name: role-containergroup-service-account
apiGroup: rbac.authorization.k8s.io