142 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			YAML
		
	
	
	
			
		
		
	
	
			142 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			YAML
		
	
	
	
| ---
 | |
| apiVersion: v1
 | |
| kind: ServiceAccount
 | |
| metadata:
 | |
|   name: jenkins-operator
 | |
| ---
 | |
| kind: Role
 | |
| apiVersion: rbac.authorization.k8s.io/v1
 | |
| metadata:
 | |
|   name: jenkins-operator
 | |
| rules:
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - services
 | |
|       - configmaps
 | |
|       - secrets
 | |
|       - serviceaccounts
 | |
|     verbs:
 | |
|       - get
 | |
|       - create
 | |
|       - update
 | |
|       - list
 | |
|       - watch
 | |
|   - apiGroups:
 | |
|       - apps
 | |
|     resources:
 | |
|       - deployments
 | |
|       - daemonsets
 | |
|       - replicasets
 | |
|       - statefulsets
 | |
|     verbs:
 | |
|       - '*'
 | |
|   - apiGroups:
 | |
|       - rbac.authorization.k8s.io
 | |
|     resources:
 | |
|       - roles
 | |
|       - rolebindings
 | |
|     verbs:
 | |
|       - create
 | |
|       - update
 | |
|       - list
 | |
|       - watch
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - pods/portforward
 | |
|     verbs:
 | |
|       - create
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - pods/log
 | |
|     verbs:
 | |
|       - get
 | |
|       - list
 | |
|       - watch
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - pods
 | |
|       - pods/exec
 | |
|     verbs:
 | |
|       - "*"
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - events
 | |
|     verbs:
 | |
|       - watch
 | |
|       - list
 | |
|       - create
 | |
|       - patch
 | |
|   - apiGroups:
 | |
|       - apps
 | |
|     resourceNames:
 | |
|       - jenkins-operator
 | |
|     resources:
 | |
|       - deployments/finalizers
 | |
|     verbs:
 | |
|       - update
 | |
|   - apiGroups:
 | |
|       - jenkins.io
 | |
|     resources:
 | |
|       - '*'
 | |
|     verbs:
 | |
|       - '*'
 | |
|   - apiGroups:
 | |
|       - ""
 | |
|     resources:
 | |
|       - persistentvolumeclaims
 | |
|     verbs:
 | |
|       - get
 | |
|       - list
 | |
|       - watch
 | |
| ---
 | |
| kind: RoleBinding
 | |
| apiVersion: rbac.authorization.k8s.io/v1
 | |
| metadata:
 | |
|   name: jenkins-operator
 | |
| subjects:
 | |
| - kind: ServiceAccount
 | |
|   name: jenkins-operator
 | |
| roleRef:
 | |
|   kind: Role
 | |
|   name: jenkins-operator
 | |
|   apiGroup: rbac.authorization.k8s.io
 | |
| ---
 | |
| apiVersion: apps/v1
 | |
| kind: Deployment
 | |
| metadata:
 | |
|   name: jenkins-operator
 | |
| spec:
 | |
|   replicas: 1
 | |
|   selector:
 | |
|     matchLabels:
 | |
|       name: jenkins-operator
 | |
|   template:
 | |
|     metadata:
 | |
|       labels:
 | |
|         name: jenkins-operator
 | |
|     spec:
 | |
|       serviceAccountName: jenkins-operator
 | |
|       containers:
 | |
|         - name: jenkins-operator
 | |
|           image: virtuslab/jenkins-operator:v0.4.0
 | |
|           command:
 | |
|           - jenkins-operator
 | |
|           args: []
 | |
|           imagePullPolicy: IfNotPresent
 | |
|           env:
 | |
|             - name: WATCH_NAMESPACE
 | |
|               valueFrom:
 | |
|                 fieldRef:
 | |
|                   fieldPath: metadata.namespace
 | |
|             - name: POD_NAME
 | |
|               valueFrom:
 | |
|                 fieldRef:
 | |
|                   fieldPath: metadata.name
 | |
|             - name: OPERATOR_NAME
 | |
|               value: "jenkins-operator"
 |