Skip to content

Commit

Permalink
Update example service-account.yml for container group in documentati…
Browse files Browse the repository at this point in the history
…on (#13479)

Co-authored-by: Hao Liu <[email protected]>
Co-authored-by: Nana <[email protected]>
  • Loading branch information
3 people authored Aug 2, 2023
1 parent 6d1c8de commit 90c3d8a
Showing 1 changed file with 18 additions and 13 deletions.
31 changes: 18 additions & 13 deletions docs/container_groups/service-account.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,30 +13,35 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: awx

name: containergroup-service-account
namespace: containergroup-namespace
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: pod-manager
name: role-containergroup-service-account
namespace: containergroup-namespace
rules:
- apiGroups: [""] # "" indicates the core API group
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources: ["pods/exec"]
verbs: ["create"]

resources: ["pods/log"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
- apiGroups: [""]
resources: ["pods/attach"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: awx-pod-manager
name: role-containergroup-service-account-binding
namespace: containergroup-namespace
subjects:
- kind: ServiceAccount
name: awx
name: containergroup-service-account
namespace: containergroup-namespace
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: pod-manager
name: role-containergroup-service-account
apiGroup: rbac.authorization.k8s.io

0 comments on commit 90c3d8a

Please sign in to comment.