sdfg

Author: mitchross

my-apps/media/garage/init-job.yaml

@@ -12,6 +12,7 @@ spec:
   template:
     spec:
       restartPolicy: OnFailure
+      serviceAccountName: garage
       containers:
         - name: init-cluster
           image: bitnami/kubectl:latest

my-apps/media/garage/rbac.yaml

@@ -14,8 +14,8 @@ rules:
   resources: ["services", "endpoints"]
   verbs: ["get", "list", "watch"]
 - apiGroups: [""]
-  resources: ["pods"]
-  verbs: ["get", "list"]
+  resources: ["pods", "pods/exec"]
+  verbs: ["get", "list", "create"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding