metadata:

name: codefresh-role

rules:

- apiGroups:[“”]

resources:[“*”]

verbs:[“list”, “watch”, “get”]

- apiGroups:[""]

resources:["*"]

verbs:["list", "watch", "get"]

{% endraw %}

{% endhighlight %}

metadata:

name: codefresh-role

rules:

- apiGroups:[ “*”]

resources:[“*”]

verbs:[“get”, “list”, “watch”, “create”, “update”, “patch”, “delete”]

—

- apiGroups:["*"]

resources:["*"]

verbs:["get", "list", "watch", "create", "update", "patch", "delete"]

—--

apiVersion: v1

kind: ServiceAccount

metadata:

name: codefresh-user

namespace: kube-system

—

—--

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

- kind: ServiceAccount

name: codefresh-user

namespace: kube-system

—

—--

apiVersion: v1

kind: Secret

type: kubernetes.io/service-account-token

metadata:

name: codefresh-user-token

namespace: kube-system

annotations:

kubernetes.io/service-account.name:“codefresh-user”

kubernetes.io/service-account.name:"codefresh-user"

{% endraw %}

{% endhighlight %}

{% endraw %}

{% endhighlight %}

{:start="2"}

1. Create the Codefresh user/role:

{% highlight shell %}

{% raw %}

kubectl apply -f codefresh-role-sa-bind.yml

{% endraw %}

{% endhighlight %}

{% highlight shell %}

{% raw %}

export CURRENT_CONTEXT=$(kubectl config current-context) && export CURRENT_CLUSTER=$(kubectl config view -o go-template=“{{\$curr_context := \”$CURRENT_CONTEXT\” }}{{range .contexts}}{{if eq .name\$curr_context}}{{.context.cluster}}{{end}}{{end}}”) && echo $(kubectl config view -o go-template=“{{\$cluster_context := \”$CURRENT_CLUSTER\”}}{{range .clusters}}{{if eq .name\$cluster_context}}{{.cluster.server}}{{end}}{{end}}”)

export CURRENT_CONTEXT=$(kubectl config current-context) && export CURRENT_CLUSTER=$(kubectl config view -o go-template="{{\$curr_context :=\"$CURRENT_CONTEXT\" }}{{range .contexts}}{{if eq .name\$curr_context}}{{.context.cluster}}{{end}}{{end}}") && echo $(kubectl config view -o go-template="{{\$cluster_context :=\"$CURRENT_CLUSTER\"}}{{range .clusters}}{{if eq .name\$cluster_context}}{{.cluster.server}}{{end}}{{end}}")

{% endraw %}

{% endhighlight %}

{% highlight shell %}

{% raw %}

echo $(kubectl get secret -n kube-system -o go-template=‘{{index .data“ca.crt” }}’ codefresh-user-token)

echo $(kubectl get secret -n kube-system -o go-template='{{index .data"ca.crt" }}' codefresh-user-token)

{% endraw %}

{% endhighlight %}

{% highlight shell %}

{% raw %}

echo $(kubectl get secret -n kube-system -o go-template=‘{{index .data“token” }}’ codefresh-user-token)

echo $(kubectl get secret -n kube-system -o go-template='{{index .data"token" }}' codefresh-user-token)

{% endraw %}

{% endhighlight %}