From dbda7b9088ccfd6eb724c48042e4b324bf16bcca Mon Sep 17 00:00:00 2001 From: william Date: Mon, 9 Jun 2025 04:35:25 +0800 Subject: [PATCH] 1 --- base/download/app-resign-role-binding.yaml | 11 +++++++++++ base/download/app-resign-role.yaml | 8 ++++++++ base/download/app-resign-service-account.yaml | 4 ++++ base/download/kustomization.yaml | 3 +++ 4 files changed, 26 insertions(+) create mode 100644 base/download/app-resign-role-binding.yaml create mode 100644 base/download/app-resign-role.yaml create mode 100644 base/download/app-resign-service-account.yaml diff --git a/base/download/app-resign-role-binding.yaml b/base/download/app-resign-role-binding.yaml new file mode 100644 index 0000000..88b8456 --- /dev/null +++ b/base/download/app-resign-role-binding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: app-resign-role-binding +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: app-resign-role +subjects: + - kind: ServiceAccount + name: app-resign-service-account \ No newline at end of file diff --git a/base/download/app-resign-role.yaml b/base/download/app-resign-role.yaml new file mode 100644 index 0000000..c5f3fa9 --- /dev/null +++ b/base/download/app-resign-role.yaml @@ -0,0 +1,8 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: app-resign-role +rules: + - apiGroups: [ "batch" ] + resources: [ "jobs" ] + verbs: [ "create" ] \ No newline at end of file diff --git a/base/download/app-resign-service-account.yaml b/base/download/app-resign-service-account.yaml new file mode 100644 index 0000000..59c279f --- /dev/null +++ b/base/download/app-resign-service-account.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: app-resign-service-account \ No newline at end of file diff --git a/base/download/kustomization.yaml b/base/download/kustomization.yaml index cca892e..dfef3b5 100644 --- a/base/download/kustomization.yaml +++ b/base/download/kustomization.yaml @@ -3,3 +3,6 @@ resources: - download-api-service.yaml - download-deployment.yaml - download-service.yaml + - app-resign-service-account.yaml + - app-resign-role.yaml + - app-resign-role-binding.yaml \ No newline at end of file