feat: execute jobs on Kubernetes

2026-09-18 18:20:10 +00:00
parent af001b6188
commit 86effb72a8
6 changed files with 900 additions and 6 deletions
@@ -1,11 +1,58 @@
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  labels:
-    app.kubernetes.io/name: ayatori
-    app.kubernetes.io/managed-by: kustomize
  name: manager-role
 rules:
- apiGroups: [""]
-  resources: ["pods"]
-  verbs: ["get", "list", "watch"]
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  - serviceaccounts
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - watch
+- apiGroups:
+  - execution.ayatori.ddupan.top
+  resources:
+  - jobclasses
+  - kubernetesexecutionparameters
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - execution.ayatori.ddupan.top
+  resources:
+  - jobs
+  verbs:
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - execution.ayatori.ddupan.top
+  resources:
+  - jobs/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - execution.ayatori.ddupan.top
+  resources:
+  - jobs/status
+  verbs:
+  - get
+  - patch
+  - update