Files
lms/deploy/rbac.yaml
Márcio Fernandes b3451396a3
All checks were successful
Casa LMS CI/CD Pipeline / deploy (push) Successful in 17s
modified: README.md
modified:   deploy/lms-deploy.yaml
new file:   deploy/rbac.yaml
2025-11-22 19:03:54 +00:00

33 lines
983 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
namespace: lyrionmusicserver
name: ci-cd
rules:
- apiGroups: [""]
resources: ["pods", "services", "secrets", "configmaps", "persistentvolumeclaims", "endpoints"]
verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
- apiGroups: ["apps"]
resources: ["deployments", "statefulsets"]
verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
- apiGroups: ["traefik.io"]
resources: ["ingressroutes"]
verbs: ["get", "watch", "list", "create", "update", "patch", "delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ci-cd
namespace: lyrionmusicserver
subjects:
- kind: ServiceAccount
name: casa-ci-cd
namespace: home-assistant
roleRef:
kind: Role
name: ci-cd
apiGroup: rbac.authorization.k8s.io