@@ -109,24 +109,22 @@ kubectl apply -n coder-workspaces -f - <<EOF
109109apiVersion: v1
110110kind: ServiceAccount
111111metadata:
112- # Must be different than the Coder control plane service account, so prevent duplicates.
113- name: coder-2
112+ name: coder-v2
114113---
115114apiVersion: v1
116115kind: Secret
117116metadata:
118- name: coder-service-account-token
117+ name: coder-v2
119118 annotations:
120- kubernetes.io/service-account.name: coder
119+ kubernetes.io/service-account.name: coder-v2
121120type: kubernetes.io/service-account-token
122121---
123122apiVersion: rbac.authorization.k8s.io/v1
124123kind: Role
125124metadata:
126- # Must be different than the Coder control plane service account, so prevent duplicates.
127- name: coder-2
125+ name: coder-v2
128126rules:
129- - apiGroups: ["", "apps", "networking.k8s.io"] # "" indicates the core API group
127+ - apiGroups: ["", "apps", "networking.k8s.io"]
130128 resources: ["persistentvolumeclaims", "pods", "deployments", "services", "secrets", "pods/exec","pods/log", "events", "networkpolicies", "serviceaccounts"]
131129 verbs: ["create", "get", "list", "watch", "update", "patch", "delete", "deletecollection"]
132130 - apiGroups: ["metrics.k8s.io", "storage.k8s.io"]
@@ -136,25 +134,24 @@ rules:
136134apiVersion: rbac.authorization.k8s.io/v1
137135kind: RoleBinding
138136metadata:
139- # Must be different than the Coder control plane service account, so prevent duplicates.
140- name: coder-2
137+ name: coder-v2
141138subjects:
142139 - kind: ServiceAccount
143- name: coder
140+ name: coder-v2
144141roleRef:
145142 kind: Role
146- name: coder
143+ name: coder-v2
147144 apiGroup: rbac.authorization.k8s.io
148145EOF
149146` ` `
150147
151148The output should be similar to :
152149
153150` ` ` text
154- serviceaccount/coder created
155- secret/coder-service-account-token created
156- role.rbac.authorization.k8s.io/coder created
157- rolebinding.rbac.authorization.k8s.io/coder created
151+ serviceaccount/coder-v2 created
152+ secret/coder-v2 created
153+ role.rbac.authorization.k8s.io/coder-v2 created
154+ rolebinding.rbac.authorization.k8s.io/coder-v2 created
158155` ` `
159156
160157# ## 2. Modify the Kubernetes template
@@ -206,9 +203,9 @@ export CLUSTER_ADDRESS=https://example.domain:6443
206203To fetch the CA certificate and token :
207204
208205` ` ` shell
209- export CLUSTER_CA_CERTIFICATE=$(kubectl get secrets coder-service-account-token -n coder-workspaces -o jsonpath="{.data.ca\. crt}")
206+ export CLUSTER_CA_CERTIFICATE=$(kubectl get secrets coder-v2 -n coder-workspaces -o jsonpath="{.data.ca\. crt}")
210207
211- export CLUSTER_SERVICEACCOUNT_TOKEN=$(kubectl get secrets coder-service-account-token -n coder-workspaces -o jsonpath="{.data.token}")
208+ export CLUSTER_SERVICEACCOUNT_TOKEN=$(kubectl get secrets coder-v2 -n coder-workspaces -o jsonpath="{.data.token}")
212209` ` `
213210
214211Create the template with these values :
0 commit comments