37 lines
720 B
YAML
37 lines
720 B
YAML
kind: bot
|
|
version: v1
|
|
metadata:
|
|
# name is a unique identifier for the Bot in the cluster.
|
|
name: icarus-nodes-mngt
|
|
spec:
|
|
roles: []
|
|
|
|
---
|
|
|
|
|
|
kind: role
|
|
version: v6
|
|
metadata:
|
|
name: icarus-nodes-mngt # use the auto created bot role (created by bot yaml)
|
|
spec:
|
|
allow:
|
|
# Allow login to the user 'ansible'.
|
|
logins: ['ansible']
|
|
# Allow connection to any node. Adjust these labels to match only nodes
|
|
# that Ansible needs to access.
|
|
node_labels:
|
|
'*': '*'
|
|
|
|
---
|
|
|
|
kind: token
|
|
version: v2
|
|
metadata:
|
|
name: icarus-nodes-mngt
|
|
spec:
|
|
roles: [Bot]
|
|
bot_name: icarus-nodes-mngt
|
|
join_method: kubernetes
|
|
kubernetes:
|
|
allow:
|
|
- service_account: icarus-nodes-mngt:argo-runner |