mirror of https://github.com/Mai-with-u/MaiBot.git
37 lines
1.0 KiB
YAML
37 lines
1.0 KiB
YAML
# 预处理脚本迁移旧版ConfigMap配置，以及启停实例所需要的rbac授权
|
||
apiVersion: v1
|
||
kind: ServiceAccount
|
||
metadata:
|
||
name: {{ .Release.Name }}-maibot-sa
|
||
namespace: {{ .Release.Namespace }}
|
||
---
|
||
apiVersion: rbac.authorization.k8s.io/v1
|
||
kind: Role
|
||
metadata:
|
||
name: {{ .Release.Name }}-maibot-role
|
||
namespace: {{ .Release.Namespace }}
|
||
rules:
|
||
- apiGroups: [""]
|
||
resources: ["configmaps", "pods"]
|
||
verbs: ["get", "list", "delete"]
|
||
- apiGroups: ["apps"]
|
||
resources: ["statefulsets"]
|
||
verbs: ["get", "list", "update", "patch"]
|
||
- apiGroups: ["apps"]
|
||
resources: ["statefulsets/scale"]
|
||
verbs: ["get", "patch", "update"]
|
||
---
|
||
apiVersion: rbac.authorization.k8s.io/v1
|
||
kind: RoleBinding
|
||
metadata:
|
||
name: {{ .Release.Name }}-maibot-rolebinding
|
||
namespace: {{ .Release.Namespace }}
|
||
subjects:
|
||
- kind: ServiceAccount
|
||
name: {{ .Release.Name }}-maibot-sa
|
||
namespace: {{ .Release.Namespace }}
|
||
roleRef:
|
||
kind: Role
|
||
name: {{ .Release.Name }}-maibot-role
|
||
apiGroup: rbac.authorization.k8s.io
|