homelab/kubernetes/apps/production/drone/runner/rbac.yaml
Lee 412a0cdc64
Some checks failed
Check Kubernetes YAMLs / scan (push) Failing after 24s
re-add drone
revert remove drone
2024-09-23 23:59:54 +00:00

41 lines
630 B
YAML

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: drone
namespace: drone-ci
rules:
- apiGroups:
- ""
resources:
- secrets
verbs:
- create
- delete
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- create
- delete
- list
- watch
- update
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: drone
namespace: drone-ci
subjects:
- kind: ServiceAccount
name: default
namespace: drone-ci
roleRef:
kind: Role
name: drone
apiGroup: rbac.authorization.k8s.io