# 这是我本地测试环境时用的配置，seecoder线上环境使用paas部署，无需配置k8s环境

apiVersion: v1
kind: Namespace
metadata:
  name: devcloud
---
# todo 私有仓库secret创建
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: admin
  namespace: devcloud
imagePullSecrets:
  - name: # todo 私有仓库secret名字
---
# 用来帮助学生部署项目的权限角色
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: devcloud-cr
rules:
  - apiGroups: [""]
    resources: ["pods","secrets","deployments","ingresses","services","namespaces"]
    verbs: ["create","update","patch","get", "watch", "list","delete"]
  # todo 学生镜像 imagepullsecret
---
# 权限角色绑定在devcloud下默认的service account ”default“ 下
apiVersion: rbac.authorization.k8s.io/v1
# This cluster role binding allows anyone in the "manager" group to read secrets in any namespace.
kind: ClusterRoleBinding
metadata:
  name: devcloud-crb
subjects:
  - kind: ServiceAccount
    name: admin
    namespace: devcloud
    apiGroup: ""
roleRef:
  kind: ClusterRole
  name: devcloud-cr
  apiGroup: rbac.authorization.k8s.io
---
# todo 数据库的配置，要询问学长持久卷相关