| 1234567891011121314151617181920212223242526272829303132333435363738394041424344 |
- apiVersion: v1
- kind: Namespace
- metadata:
- name: devcloud
- ---
- # todo 私有仓库secret创建
- ---
- apiVersion: v1
- kind: ServiceAccount
- metadata:
- name: admin
- namespace: devcloud
- imagePullSecrets:
- - name: # todo 私有仓库secret名字
- ---
- # 用来帮助学生部署项目的权限角色
- apiVersion: rbac.authorization.k8s.io/v1
- kind: ClusterRole
- metadata:
- name: devcloud-cr
- rules:
- - apiGroups: [""]
- resources: ["pods","secrets","deployments","ingresses","services","namespaces"]
- verbs: ["create","update","patch","get", "watch", "list","delete"]
- # todo 学生镜像 imagepullsecret
- ---
- # 权限角色绑定在devcloud下默认的service account ”default“ 下
- apiVersion: rbac.authorization.k8s.io/v1
- # This cluster role binding allows anyone in the "manager" group to read secrets in any namespace.
- kind: ClusterRoleBinding
- metadata:
- name: devcloud-crb
- subjects:
- - kind: ServiceAccount
- name: admin
- namespace: devcloud
- apiGroup: ""
- roleRef:
- kind: ClusterRole
- name: devcloud-cr
- apiGroup: rbac.authorization.k8s.io
- ---
- # todo 数据库的配置，要询问学长持久卷相关
|
