woodpecker kubedock

woodpecker/kubedock-deployment.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kubedock-server
+  namespace: woodpecker
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: kubedock-server
+  template:
+    metadata:
+      labels:
+        app: kubedock-server
+    spec:
+      serviceAccountName: kubedock
+      containers:
+        - name: kubedock-server
+          image: joyrex2001/kubedock
+          ports:
+            - containerPort: 2475
+          args: [
+              "server",
+              "--namespace=woodpecker",
+              "--service-account=kubedock",
+              "--timeout=20m0s",
+              "--disable-dind",
+              "--reverse-proxy",
+              "--reapmax=60m",
+            ]

woodpecker/kubedock-role.yaml

@@ -0,0 +1,21 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: kubedock-role
+  namespace: woodpecker
+rules:
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["create", "get", "list", "delete", "watch"]
+  - apiGroups: [""]
+    resources: ["pods/log"]
+    verbs: ["list", "get"]
+  - apiGroups: [""]
+    resources: ["pods/exec"]
+    verbs: ["create"]
+  - apiGroups: [""]
+    resources: ["services"]
+    verbs: ["create", "get", "list", "delete"]
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["create", "get", "list", "delete"]

woodpecker/kubedock-rolebinding.yaml

@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: kubedock-rolebinding
+  namespace: woodpecker
+subjects:
+  - kind: User
+    name: system:serviceaccount:woodpecker:kubedock
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: Role
+  name: kubedock-role
+  apiGroup: rbac.authorization.k8s.io

woodpecker/kubedock-service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: kubedock-service
+  namespace: woodpecker
+spec:
+  selector:
+    app: kubedock-server
+  type: ClusterIP
+  clusterIP: None

woodpecker/kubedock-serviceaccount.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kubedock
+  namespace: woodpecker