Merge pull request #50 from jmhardison/add-tc-agent-rolebinding

adding role and rolebinding
jmhardison · Sep 29, 2023 · f7e4f9f · f7e4f9f
2 parents 07a777e + 3acd8b5
commit f7e4f9f
Show file tree

Hide file tree

Showing 2 changed files with 33 additions and 0 deletions.
diff --git a/apps/jetbrains/teamcity-agent/kustomization.yaml b/apps/jetbrains/teamcity-agent/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: jetbrains
+
+resources:
+- rbac.yaml
+
diff --git a/apps/jetbrains/teamcity-agent/rbac.yaml b/apps/jetbrains/teamcity-agent/rbac.yaml
@@ -0,0 +1,26 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: teamcity:manage-agents
+rules:
+- apiGroups: [""]
+  resources: ["namespaces"]
+  verbs: ["list", "get"]
+- apiGroups: [""]
+  resources: ["pods"]
+  verbs: ["get", "create", "list", "delete"]
+- apiGroups: ["extensions", "apps"]
+  resources: ["deployments"]
+  verbs: ["list", "get"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: teamcity:manage-agents
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: teamcity:manage-agents
+subjects:
+  - kind: ServiceAccount
+    name: teamcity