--- kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: namespace: default name: "horologium" rules: - apiGroups: - "prow.k8s.io" resources: - prowjobs verbs: - create - list --- kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: namespace: default name: "horologium" roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: "horologium" subjects: - kind: ServiceAccount name: "horologium" --- kind: ServiceAccount apiVersion: v1 metadata: namespace: default name: "horologium" --- apiVersion: apps/v1 kind: Deployment metadata: namespace: default name: horologium labels: app: horologium spec: replicas: 1 # Do not scale up. strategy: type: Recreate selector: matchLabels: app: horologium template: metadata: labels: app: horologium spec: serviceAccountName: "horologium" terminationGracePeriodSeconds: 30 containers: - name: horologium image: gcr.io/k8s-prow/horologium:v20230315-6d54c174f4 args: - --config-path=/etc/config/config.yaml - --job-config-path=/etc/job-config - --dry-run=false ports: - name: metrics containerPort: 9090 resources: limits: cpu: 100m memory: 256M requests: cpu: 100m memory: 256M volumeMounts: - name: config mountPath: /etc/config readOnly: true - name: job-config mountPath: /etc/job-config readOnly: true volumes: - name: config configMap: name: config - name: job-config configMap: name: job-config nodeSelector: Archtype: "x86"