docs: add rbac for kubernetes

Signed-off-by: Alexander Trost <[email protected]>
galexrt · Dec 13, 2023 · af4ef55 · af4ef55
1 parent 56c92d3
commit af4ef55
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/docs/kubernetes.md b/docs/kubernetes.md
@@ -0,0 +1,31 @@
+# Kubernetes
+
+## RBAC
+
+```yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ancientt
+rules:
+  # To create the `ancientt` namespace
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs:
+      - get
+      - create
+  # To get/list, create and delete test runner pods
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs:
+      - get
+      - list
+      - create
+      - delete
+  # Selecting the nodes
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs:
+      - get
+      - list
+```