osbuilder/config/nginx/role.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: artifactCopier
rules:
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - list
  - get
- apiGroups:
  - ""
  resources:
  - pods/exec
  verbs:
  - create
[WIP] Create rbac resources to allow the Job to copy to the server Pod Currently fails with: ``` Error from server (Forbidden): pods is forbidden: User "system:serviceaccount:default:hello-kairos" cannot list resource "pods" in API group "" at the cluster scope ``` because we try to list pods with `-A`. This means we are going to get a similar error if we try to copy files to a Pod on another namespace unless we grant permission at the cluster scope or just that namespace. (Is that possible? Maybe if we create the Role in the same namespace as the server.) Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me> 2022-12-08 16:35:45 +02:00			`apiVersion: rbac.authorization.k8s.io/v1`
			`kind: Role`
			`metadata:`
			`name: artifactCopier`
			`rules:`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- pods`
			`verbs:`
			`- list`
Refactor kustomization, implement cleanup with finalizers and write tests Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me> 2022-12-12 18:09:31 +02:00			`- get`
			`- apiGroups:`
			`- ""`
			`resources:`
			`- pods/exec`
			`verbs:`
			`- create`