1

base/download/app-resign-role-binding.yaml

@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: app-resign-role-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: app-resign-role
+subjects:
+  - kind: ServiceAccount
+    name: app-resign-service-account

base/download/app-resign-role.yaml

@@ -0,0 +1,8 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: app-resign-role
+rules:
+  - apiGroups: [ "batch" ]
+    resources: [ "jobs" ]
+    verbs: [ "create" ]

base/download/app-resign-service-account.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: app-resign-service-account

base/download/kustomization.yaml

@@ -3,3 +3,6 @@ resources:
   - download-api-service.yaml
   - download-deployment.yaml
   - download-service.yaml
+  - app-resign-service-account.yaml
+  - app-resign-role.yaml
+  - app-resign-role-binding.yaml