Admin Bot
a8e8d33a28
CI runner (Forgejo DinD) runs jobs as Docker containers — no in-cluster SA token available. Industry standard: dedicated SA with minimal RBAC, long-lived token as KUBECONFIG_B64 secret in Forgejo. SA: ci-tekton-trigger (namespace: api) Permissions: create/get/watch/delete PipelineRuns, get TaskRuns, get pod logs Token: kubernetes.io/service-account-token secret
18 lines
312 B
YAML
18 lines
312 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: api
|
|
|
|
resources:
|
|
- ci-rbac.yaml
|
|
- task-integration-test.yaml
|
|
- pipeline-integration-test.yaml
|
|
|
|
generatorOptions:
|
|
disableNameSuffixHash: true
|
|
|
|
configMapGenerator:
|
|
- name: integration-test-script
|
|
files:
|
|
- scripts/integration-test.sh
|