diff options
author | Mayra Cabrera <mcabrera@gitlab.com> | 2018-09-21 17:23:33 -0500 |
---|---|---|
committer | Mayra Cabrera <mcabrera@gitlab.com> | 2018-09-26 21:47:29 -0300 |
commit | e5a512628b7889fad30242751f982251dffdc463 (patch) | |
tree | 7561cd92417c54e38628d67ca4ef7f0b2eefa0d5 /spec/requests | |
parent | e255b88e51b956d92afb5e9b90a2749a60e63459 (diff) | |
download | gitlab-ce-51716-automatically-create-service-account-to-project-namespace.tar.gz |
Limit GCP Kubernetes service to project namespace51716-automatically-create-service-account-to-project-namespace
This is needed to support RBAC on AutoDevOps, basically we:
- Creates a service account under project's namespace and assign it a
different token
- If RBAC is enabled we create a RoleBinding for this new service
account with edit access
- Service account name is exposed through environment variables on
Platform::Kubernetes
- KUBE_TOKEN and KUBECONFIG are replaced with new credentials
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/51716
Diffstat (limited to 'spec/requests')
0 files changed, 0 insertions, 0 deletions