diff --git a/woodpecker/kubedock-deployment.yaml b/woodpecker/kubedock-deployment.yaml new file mode 100644 index 0000000..d537ee6 --- /dev/null +++ b/woodpecker/kubedock-deployment.yaml @@ -0,0 +1,30 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: kubedock-server + namespace: woodpecker +spec: + replicas: 1 + selector: + matchLabels: + app: kubedock-server + template: + metadata: + labels: + app: kubedock-server + spec: + serviceAccountName: kubedock + containers: + - name: kubedock-server + image: joyrex2001/kubedock + ports: + - containerPort: 2475 + args: [ + "server", + "--namespace=woodpecker", + "--service-account=kubedock", + "--timeout=20m0s", + "--disable-dind", + "--reverse-proxy", + "--reapmax=60m", + ] diff --git a/woodpecker/kubedock-role.yaml b/woodpecker/kubedock-role.yaml new file mode 100644 index 0000000..d61d30c --- /dev/null +++ b/woodpecker/kubedock-role.yaml @@ -0,0 +1,21 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: kubedock-role + namespace: woodpecker +rules: + - apiGroups: [""] + resources: ["pods"] + verbs: ["create", "get", "list", "delete", "watch"] + - apiGroups: [""] + resources: ["pods/log"] + verbs: ["list", "get"] + - apiGroups: [""] + resources: ["pods/exec"] + verbs: ["create"] + - apiGroups: [""] + resources: ["services"] + verbs: ["create", "get", "list", "delete"] + - apiGroups: [""] + resources: ["configmaps"] + verbs: ["create", "get", "list", "delete"] diff --git a/woodpecker/kubedock-rolebinding.yaml b/woodpecker/kubedock-rolebinding.yaml new file mode 100644 index 0000000..10ebab5 --- /dev/null +++ b/woodpecker/kubedock-rolebinding.yaml @@ -0,0 +1,13 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: kubedock-rolebinding + namespace: woodpecker +subjects: + - kind: User + name: system:serviceaccount:woodpecker:kubedock + apiGroup: rbac.authorization.k8s.io +roleRef: + kind: Role + name: kubedock-role + apiGroup: rbac.authorization.k8s.io diff --git a/woodpecker/kubedock-service.yaml b/woodpecker/kubedock-service.yaml new file mode 100644 index 0000000..db18c23 --- /dev/null +++ b/woodpecker/kubedock-service.yaml @@ -0,0 +1,10 @@ +apiVersion: v1 +kind: Service +metadata: + name: kubedock-service + namespace: woodpecker +spec: + selector: + app: kubedock-server + type: ClusterIP + clusterIP: None diff --git a/woodpecker/kubedock-serviceaccount.yaml b/woodpecker/kubedock-serviceaccount.yaml new file mode 100644 index 0000000..b20eea7 --- /dev/null +++ b/woodpecker/kubedock-serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: kubedock + namespace: woodpecker