Files
homelab-infra/platform/dynamic-runner/rbac.yaml
T
panxiao81 c4f425e9ea
yaml / yaml (pull_request) Successful in 10s
按执行职责拆分动态 Runner 组件
2026-09-16 14:53:30 +00:00

42 lines
874 B
YAML

apiVersion: v1
kind: ServiceAccount
metadata:
name: dynamic-runner-controller
namespace: dynamic-runner
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: dynamic-runner-pod-worker
namespace: dynamic-runner
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: gitea-dynamic-runner
namespace: dynamic-runner
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: dynamic-runner-pod-worker
namespace: dynamic-runner
rules:
- apiGroups: [""]
resources: [pods]
verbs: [create, get, patch, delete]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: dynamic-runner-pod-worker
namespace: dynamic-runner
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: dynamic-runner-pod-worker
subjects:
- kind: ServiceAccount
name: dynamic-runner-pod-worker
namespace: dynamic-runner