thomasklein/terraform-lawndale-k8s
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Setting up CI with Drone #1

Merged
thomasklein merged 10 commits from adding-ci into main 2022-05-27 13:56:17 +00:00
Conversation 0 Commits 10 Files Changed 6 +31 -49
1 changed files with 31 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 29065a4df8 - Show all commits

80
ci.tf
View File

@@ -39,17 +39,10 @@ resource "kubernetes_cluster_role" "ci_cd" {
"pods", "pods",
"namespaces", "namespaces",
"secrets", "secrets",
"serviceaccounts",
"services", "services",
] ]
verbs = [ verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
"create",
"delete",
"get",
"list",
"patch",
"update",
"watch",
]
} }
rule { rule {
@@ -58,15 +51,7 @@ resource "kubernetes_cluster_role" "ci_cd" {
"deployments", "deployments",
"replicasets", # needed for 'helm upgrade --wait' "replicasets", # needed for 'helm upgrade --wait'
] ]
verbs = [ verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
"create",
"delete",
"get",
"list",
"patch",
"update",
"watch",
]
} }
rule { rule {
@@ -74,45 +59,42 @@ resource "kubernetes_cluster_role" "ci_cd" {
resources = [ resources = [
"horizontalpodautoscalers" "horizontalpodautoscalers"
] ]
verbs = [ verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
"create",
"delete",
"get",
"list",
"patch",
"update",
"watch",
]
} }
rule { rule {
api_groups = ["networking.k8s.io"] api_groups = ["networking.k8s.io"]
resources = [ resources = [
"ingresses", "ingresses",
]
verbs = [
"create",
"delete",
"get",
"list",
"patch",
"update",
"watch",
]
}
rule {
api_groups = ["networking.k8s.io"]
resources = [
"networkpolicies" "networkpolicies"
] ]
verbs = [ verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
"create", }
"delete",
"get", rule {
"list", api_groups = ["apiextensions.k8s.io"]
"patch", resources = [
"update", "customresourcedefinitions"
"watch",
] ]
verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
}
rule {
api_groups = ["rbac.authorization.k8s.io"]
resources = [
"clusterrolebindings",
"clusterroles",
"rolebindings",
"roles",
]
verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
}
rule {
api_groups = ["policy"]
resources = [
"podsecuritypolicies",
]
verbs = ["create", "delete", "get", "list", "patch", "update", "watch"]
} }
} }