k3s-infra/infrastructure/gitea/actions.rbac.yaml

28 lines
584 B
YAML

apiVersion: v1
kind: ServiceAccount
metadata:
name: builder-service-account
namespace: gitea
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: builder-rolebinding
namespace: target
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: edit
subjects:
- namespace: gitea
kind: ServiceAccount
name: builder-service-account
---
apiVersion: v1
kind: Secret
metadata:
name: builder-service-account-secret
annotations:
kubernetes.io/service-account.name: builder-service-account
type: kubernetes.io/service-account-token