@@ -252,49 +252,49 @@ jobs:
252252 kubectl create serviceaccount dinky -n dinky
253253 kubectl create clusterrolebinding flink-role-binding-dinky --clusterrole=edit --serviceaccount=dinky:dinky
254254 cat <<EOF | kubectl apply -f -
255- apiVersion: rbac.authorization.k8s.io/v1
256- kind: ClusterRole
257- metadata:
258- name: dinky-node-reader
259- rules:
260- - apiGroups: [""]
261- resources: ["nodes"]
262- verbs: ["get", "list", "watch"]
263- ---
264- apiVersion: rbac.authorization.k8s.io/v1
265- kind: ClusterRoleBinding
266- metadata:
267- name: dinky-node-reader-binding
268- roleRef:
269- apiGroup: rbac.authorization.k8s.io
270- kind: ClusterRole
271- name: dinky-node-reader
272- subjects:
273- - kind: ServiceAccount
274- name: dinky
275- namespace: dinky
276- EOF
277- mkdir ./kube
278- cat <<EOF > ./kube/k3s.yaml
279- apiVersion: v1
280- kind: Config
281- clusters:
282- - name: k3d-default
283- cluster:
284- server: https://172.28.0.1:6550
285- insecure-skip-tls-verify: true
286- users:
287- - name: dinky
288- user:
289- token: $(kubectl create token dinky -n dinky)
290- contexts:
291- - name: dinky
292- context:
293- cluster: k3d-default
294- namespace: dinky
295- user: dinky
296- current-context: dinky
297- EOF
255+ apiVersion: rbac.authorization.k8s.io/v1
256+ kind: ClusterRole
257+ metadata:
258+ name: dinky-node-reader
259+ rules:
260+ - apiGroups: [""]
261+ resources: ["nodes"]
262+ verbs: ["get", "list", "watch"]
263+ ---
264+ apiVersion: rbac.authorization.k8s.io/v1
265+ kind: ClusterRoleBinding
266+ metadata:
267+ name: dinky-node-reader-binding
268+ roleRef:
269+ apiGroup: rbac.authorization.k8s.io
270+ kind: ClusterRole
271+ name: dinky-node-reader
272+ subjects:
273+ - kind: ServiceAccount
274+ name: dinky
275+ namespace: dinky
276+ EOF
277+ mkdir ./kube
278+ cat <<EOF > ./kube/k3s.yaml
279+ apiVersion: v1
280+ kind: Config
281+ clusters:
282+ - name: k3d-default
283+ cluster:
284+ server: https://172.28.0.1:6550
285+ insecure-skip-tls-verify: true
286+ users:
287+ - name: dinky
288+ user:
289+ token: $(kubectl create token dinky -n dinky)
290+ contexts:
291+ - name: dinky
292+ context:
293+ cluster: k3d-default
294+ namespace: dinky
295+ user: dinky
296+ current-context: dinky
297+ EOF
298298 - name : Init k3s main images
299299 run : |
300300 docker exec k3d-k3s-default-server-0 crictl pull library/busybox:latest
0 commit comments