Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
71 changes: 0 additions & 71 deletions deploy/openshift/template.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,62 +9,6 @@ objects:
apiVersion: v1
metadata:
name: '${SERVICE_ACCOUNT_NAME}'
- kind: ServiceAccount
apiVersion: v1
metadata:
name: '${BACKSTAGE_PLUGIN_SA}'
- kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: '${BACKSTAGE_PLUGIN_READ_ONLY_ROLE}'
rules:
- verbs:
- get
- list
- watch
apiGroups:
- '*'
resources:
- pods
- services
- deployments
- replicasets
- horizontalpodautoscalers
- pods/log
- verbs:
- get
- list
- watch
apiGroups:
- batch
resources:
- jobs
- cronjobs
- verbs:
- get
- list
apiGroups:
- route.openshift.io
resources:
- routes
- verbs:
- get
- list
apiGroups:
- metrics.k8s.io
resources:
- pods
- kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: '${BACKSTAGE_PLUGIN_SA_ROLE_BINDING}'
subjects:
- kind: ServiceAccount
name: '${BACKSTAGE_PLUGIN_SA}'
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: '${BACKSTAGE_PLUGIN_READ_ONLY_ROLE}'
- kind: Service
apiVersion: v1
metadata:
Expand Down Expand Up @@ -254,18 +198,3 @@ parameters:
value: trusted-content-exhort-stage
displayName: Project name (default -- trusted-content-exhort-stage)
description: 'Project name'
- name: BACKSTAGE_PLUGIN_SA
displayName: Backstage ServiceAccount name
description: The name of the ServiceAccount to use by the backstage plugin.
value: backstage-k8-plugin-sa
required: true
- name: BACKSTAGE_PLUGIN_READ_ONLY_ROLE
displayName: Backstage plugin role
description: The name of the role used by backstage plugin service account.
value: backstage-k8-plugin-read-only
required: true
- name: BACKSTAGE_PLUGIN_SA_ROLE_BINDING
displayName: backstage plugin role binding name
description: The name of the role binding used by the ServiceAccount to used by the backstage plugin.
value: backstage-k8-plugin-sa-role-binding
required: true