fix drone perms

This commit is contained in:
2025-03-26 17:54:04 +01:00
parent e9f8b65f79
commit 23b96db049

View File

@@ -1,39 +1,25 @@
kind: Role kind: Role
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
namespace: default namespace: drone
name: drone name: drone
rules: rules:
- apiGroups: - apiGroups: [""]
- "" resources: ["secrets"]
resources: verbs: ["create", "delete"]
- secrets - apiGroups: [""]
verbs: resources: ["pods", "pods/log"]
- create verbs: ["get", "create", "delete", "list", "watch", "update"]
- delete
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- create
- delete
- list
- watch
- update
--- ---
kind: RoleBinding kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
name: drone name: drone
namespace: default namespace: drone
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: default name: default
namespace: default namespace: drone
roleRef: roleRef:
kind: Role kind: Role
name: drone name: drone