From 67e8a7e05e1ab11708c1ddda39d6e3f3ecb63d7b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=AD=99=E5=B0=8F=E4=BA=91?= Date: Sat, 6 Sep 2025 15:48:31 +0800 Subject: [PATCH] add quanxian --- drone/drone-pipeline-serviceaccount.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/drone/drone-pipeline-serviceaccount.yaml b/drone/drone-pipeline-serviceaccount.yaml index 1ee0e65..344a41f 100644 --- a/drone/drone-pipeline-serviceaccount.yaml +++ b/drone/drone-pipeline-serviceaccount.yaml @@ -10,10 +10,16 @@ metadata: name: drone-pipeline rules: - apiGroups: [""] - resources: ["pods", "services", "deployments", "replicasets", "secrets"] + resources: ["pods", "pods/log", "pods/exec", "pods/attach", "services", "deployments", "replicasets", "secrets", "configmaps", "persistentvolumes", "persistentvolumeclaims"] verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] - apiGroups: ["apps"] - resources: ["deployments", "replicasets"] + resources: ["deployments", "replicasets", "daemonsets", "statefulsets"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] +- apiGroups: ["batch"] + resources: ["jobs", "cronjobs"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] +- apiGroups: ["extensions", "networking.k8s.io"] + resources: ["ingresses", "networkpolicies"] verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] --- apiVersion: rbac.authorization.k8s.io/v1