serviceaccount

jlbb · Aug 3, 2018 · 177c0eb · 177c0eb
1 parent 4a7a12d
commit 177c0eb
Show file tree

Hide file tree

Showing 3 changed files with 19 additions and 1 deletion.
diff --git a/helm/jenkins/Jenkinsfile.deploy b/helm/jenkins/Jenkinsfile.deploy
@@ -2,7 +2,7 @@ pipeline {
   agent {
     kubernetes {
       label 'helm-pod'
-      serviceAccount 'jenkins'
+      serviceAccount 'jenkins-helm'
       containerTemplate {
         name 'helm-pod'
         image 'wardviaene/helm-s3'

diff --git a/helm/jenkins/README.md b/helm/jenkins/README.md
@@ -1,4 +1,5 @@
 # install jenkins
 ```
+kubectl create -f serviceaccount.yaml
 helm install --name jenkins --set rbac.install=true,Master.RunAsUser=1000,Master.FsGroup=1000 stable/jenkins
 ```
diff --git a/helm/jenkins/serviceaccount.yaml b/helm/jenkins/serviceaccount.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: jenkins-helm
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: jenkins-helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: jenkins-helm
+  namespace: default