Merge pull request #398 from timbuchwaldt/master

Add RBAC K8S items

bundlewrap/items/kubernetes.py

@@ -214,6 +214,22 @@ def validate_name(cls, bundle, name):
             ))
 
 
+class KubernetesClusterRole(KubernetesItem):
+    BUNDLE_ATTRIBUTE_NAME = "k8s_clusterroles"
+    KIND = "ClusterRole"
+    KUBECTL_RESOURCE_TYPE = "clusterroles"
+    KUBERNETES_APIVERSION = "rbac.authorization.k8s.io/v1"
+    ITEM_TYPE_NAME = "k8s_clusterrole"
+
+
+class KubernetesClusterRoleBinding(KubernetesItem):
+    BUNDLE_ATTRIBUTE_NAME = "k8s_clusterrolebindings"
+    KIND = "ClusterRoleBinding"
+    KUBECTL_RESOURCE_TYPE = "clusterrolebindings"
+    KUBERNETES_APIVERSION = "rbac.authorization.k8s.io/v1"
+    ITEM_TYPE_NAME = "k8s_clusterrolebinding"
+
+
 class KubernetesConfigMap(KubernetesItem):
     BUNDLE_ATTRIBUTE_NAME = "k8s_configmaps"
     KIND = "ConfigMap"
@@ -334,6 +350,14 @@ class KubernetesService(KubernetesItem):
     ITEM_TYPE_NAME = "k8s_service"
 
 
+class KubernetesServiceAccount(KubernetesItem):
+    BUNDLE_ATTRIBUTE_NAME = "k8s_serviceaccounts"
+    KIND = "ServiceAccount"
+    KUBECTL_RESOURCE_TYPE = "serviceaccounts"
+    KUBERNETES_APIVERSION = "v1"
+    ITEM_TYPE_NAME = "k8s_serviceaccount"
+
+
 class KubernetesStatefulSet(KubernetesItem):
     BUNDLE_ATTRIBUTE_NAME = "k8s_statefulsets"
     KIND = "StatefulSet"

docs/content/items/k8s.md

@@ -29,6 +29,8 @@ Note that all item names (except namespaces themselves) must be prefixed with th
 
 <table>
 <tr><th>Resource type</th><th>Bundle attribute</th><th>apiVersion</th></tr>
+<tr><td>Cluster Role</td><td>k8s_clusterroles</td><td>rbac.authorization.k8s.io/v1</td></tr>
+<tr><td>Cluster Role Binding</td><td>k8s_clusterrolebindingss</td><td>rbac.authorization.k8s.io/v1</td></tr>
 <tr><td>Config Map</td><td>k8s_configmaps</td><td>v1</td></tr>
 <tr><td>Cron Job</td><td>k8s_cronjobs</td><td>batch/v1beta1</td></tr>
 <tr><td>Daemon Set</td><td>k8s_daemonsets</td><td>v1</td></tr>
@@ -37,6 +39,7 @@ Note that all item names (except namespaces themselves) must be prefixed with th
 <tr><td>Namespace</td><td>k8s_namespaces</td><td>v1</td></tr>
 <tr><td>Persistent Volume Claim</td><td>k8s_pvc</td><td>v1</td></tr>
 <tr><td>Service</td><td>k8s_services</td><td>v1</td></tr>
+<tr><td>Service Account</td><td>k8s_serviceaccounts</td><td>v1</td></tr>
 <tr><td>Secret</td><td>k8s_secrets</td><td>v1</td></tr>
 <tr><td>StatefulSet</td><td>k8s_statefulsets</td><td>apps/v1</td></tr>
 </table>