Merge pull request #78 from zachaller/patch-1

Add Service Account to k8s deployment
mailgun · Nov 5, 2020 · 7ed5016 · 7ed5016
2 parents 0d4c3ba + 05047e9
commit 7ed5016
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/k8s-deployment.yaml b/k8s-deployment.yaml
@@ -14,6 +14,7 @@ spec:
       labels:
         app: gubernator
     spec:
+      serviceAccountName: gubernator
       containers:
         - image: thrawn01/gubernator:latest
           imagePullPolicy: IfNotPresent
@@ -64,3 +65,33 @@ spec:
   #port: 80
   selector:
     app: gubernator
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gubernator
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: get-endpoints
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: get-endpoints
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: get-endpoints
+subjects:
+- kind: ServiceAccount
+  name: gubernator