mirror of
https://github.com/ansible/awx.git
synced 2026-01-09 23:12:08 -03:30
Update example service-account.yml for container group in documentation (#13479)
Co-authored-by: Hao Liu <44379968+TheRealHaoLiu@users.noreply.github.com> Co-authored-by: Nana <35573203+masbahnana@users.noreply.github.com>
This commit is contained in:
parent
6d1c8de4ed
commit
90c3d8a275
@ -13,30 +13,35 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
name: awx
|
name: containergroup-service-account
|
||||||
|
namespace: containergroup-namespace
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: Role
|
kind: Role
|
||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
metadata:
|
metadata:
|
||||||
name: pod-manager
|
name: role-containergroup-service-account
|
||||||
|
namespace: containergroup-namespace
|
||||||
rules:
|
rules:
|
||||||
- apiGroups: [""] # "" indicates the core API group
|
- apiGroups: [""]
|
||||||
resources: ["pods"]
|
resources: ["pods"]
|
||||||
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
||||||
- apiGroups: [""]
|
- apiGroups: [""]
|
||||||
resources: ["pods/exec"]
|
resources: ["pods/log"]
|
||||||
verbs: ["create"]
|
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["pods/attach"]
|
||||||
|
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
|
||||||
---
|
---
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
metadata:
|
metadata:
|
||||||
name: awx-pod-manager
|
name: role-containergroup-service-account-binding
|
||||||
|
namespace: containergroup-namespace
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: awx
|
name: containergroup-service-account
|
||||||
|
namespace: containergroup-namespace
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: Role
|
kind: Role
|
||||||
name: pod-manager
|
name: role-containergroup-service-account
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user