Added manifests for GitLab CI RBAC config

.gitlab-ci.yml

@@ -84,9 +84,7 @@
         - sed -i "s/__CI_ENVIRONMENT_SLUG__/${CI_ENVIRONMENT_SLUG}/" deployment.yaml ingress.yaml service.yaml
         - sed -i "s/__VERSION__/${CI_COMMIT_REF_NAME}/" deployment.yaml ingress.yaml service.yaml
         - kubectl get deployments -l app=${CI_ENVIRONMENT_SLUG}
-        - |
-          test $(kubectl apply -f manifests/deployment.yml -n ${NAMESPACE}) == *"unchanged"* && \
-          kubectl patch deployment ${CI_ENVIRONMENT_SLUG} -p "{\"spec\":{\"template\":{\"metadata\":{\"annotations\":{\"ci-last-updated\":\"$(date +'%s')\"}}}}}"
+        - if [[ $(kubectl apply -f deployment.yaml) == *"unchanged"* ]]; then kubectl patch deployment ${CI_ENVIRONMENT_SLUG} -p "{\"spec\":{\"template\":{\"metadata\":{\"annotations\":{\"ci-last-updated\":\"$(date +'%s')\"}}}}}"; fi
         - kubectl apply -f service.yaml || true
         - kubectl apply -f ingress.yaml
 

gitlab-ci/README.md

+This directory contains a Namespace and RBAC ServiceAccount, Role and RoleBinding to be used for GitLab Kubernetes integration.

gitlab-ci/namespace.yaml

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: presentation-gitlab-k8s

gitlab-ci/rbac.yaml

+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gitlab-ci
+  namespace: presentation-gitlab-k8s
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+  name: gitlab-ci
+  namespace: presentation-gitlab-k8s
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: gitlab-ci
+  namespace: presentation-gitlab-k8s

manifests/namespace.yaml

-apiVersion: v1
-kind: Namespace
-metadata:
-  name: presentation-gitlab-k8s
-spec: {}