Files
trebuchet/apps/api/infra/base/rbac.yaml
T
Chris Farhood 54c92e8142 feat(infra): add all Kubernetes manifests
- namespace, temporal server, workspaces PVC
- API server deployment, service, serviceaccount, RBAC
- Dev overlay

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-19 11:25:47 -04:00

30 lines
636 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: shannon-api
namespace: shannon
rules:
- apiGroups: ["batch"]
resources: ["jobs"]
verbs: ["create", "get", "list", "delete", "watch"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list", "watch"]
- apiGroups: [""]
resources: ["pods/log"]
verbs: ["get"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: shannon-api
namespace: shannon
subjects:
- kind: ServiceAccount
name: shannon-api
namespace: shannon
roleRef:
kind: Role
name: shannon-api
apiGroup: rbac.authorization.k8s.io