External module "lib/kubernetes/rbac"

upsertRbac

• upsertRbac(req: KubernetesResourceRequest): Promise<RbacResources>

• Create requested RBAC resources if they do not exist. If req.roleSpec is truthy, the service account, role, and binding are created. If req.roleSpect is falsey but req.serviceAccountSpec is truthy, only the service account is created. If any of the RBAC resources exist and their corresponding partial spec is provided in req, the resource is patched.

  Parameters

  • req: KubernetesResourceRequest

    Kuberenetes application request

  Returns Promise<RbacResources>

  Kubernetes RBAC resource specs that were created or patched, some may be undefined