Add Kaniko build automation for resume-site
- Namespace for resume-site resources - Build trigger CronJob (runs every 5 minutes) - Kaniko-based image builds to Harbor - RBAC for build job creation - PVC for tracking last commit Follows same pattern as neon-vortex 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
32
k8s/build-trigger-rbac.yaml
Normal file
32
k8s/build-trigger-rbac.yaml
Normal file
@@ -0,0 +1,32 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: build-trigger-cron-sa
|
||||
namespace: resume-site
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: build-trigger-role
|
||||
namespace: flux-builds
|
||||
rules:
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs"]
|
||||
verbs: ["create", "get", "list", "delete"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods", "pods/log"]
|
||||
verbs: ["get", "list"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: build-trigger-binding
|
||||
namespace: flux-builds
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: build-trigger-role
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: build-trigger-cron-sa
|
||||
namespace: resume-site
|
||||
Reference in New Issue
Block a user