# 这是我本地测试环境minikube用的配置，seecoder线上环境使用paas部署，无需配置k8s环境
apiVersion: v1
kind: Namespace
metadata:
  name: devcloud
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin
  namespace: devcloud
---
# 用来帮助学生部署项目的权限角色
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: devcloud-cr
rules:
  - apiGroups: ["","apps", "autoscaling", "batch", "extensions"]
    # 在 HTTP 层面，用来访问 Secret 对象的资源的名称为 "secrets"
    resources: ["ingresses", "services", "endpoints", "pods","secrets","configmaps","crontabs","deployments","jobs","nodes","rolebindings","clusterroles","daemonsets","replicasets","statefulsets","horizontalpodautoscalers","replicationcontrollers","cronjobs"]
    verbs: ["get", "list", "watch", "create", "update", "patch", "delete", "exec"]
---
# 权限角色绑定在devcloud下默认的service account ”default“ 下
apiVersion: rbac.authorization.k8s.io/v1
# This cluster role binding allows anyone in the "manager" group to read secrets in any namespace.
kind: ClusterRoleBinding
metadata:
  name: devcloud-crb
subjects:
  - kind: ServiceAccount
    name: default # Name is case sensitive
    namespace: devcloud
roleRef:
  kind: ClusterRole
  name: devcloud-cr
  apiGroup: rbac.authorization.k8s.io
---
# todo 数据库的配置，要询问学长持久卷相关

