From 6a776b4087d25ad316611eb8aca598a93aaa87d1 Mon Sep 17 00:00:00 2001
From: Devon Mackay <devon@dds.mil>
Date: Sun, 12 Aug 2018 15:08:02 -0400
Subject: [PATCH] Add atat-deployer user for travis to use

---
 deploy/kubernetes/atst-travis-deployer.yml | 38 ++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 deploy/kubernetes/atst-travis-deployer.yml

diff --git a/deploy/kubernetes/atst-travis-deployer.yml b/deploy/kubernetes/atst-travis-deployer.yml
new file mode 100644
index 00000000..4b36ef10
--- /dev/null
+++ b/deploy/kubernetes/atst-travis-deployer.yml
@@ -0,0 +1,38 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: atat-deployer
+  namespace: atat
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  namespace: atat
+  name: travis-deploy-role
+rules:
+- apiGroups: ["extensions", "apps"]
+  resources: ["deployments"]
+  verbs: ["get", "create", "update", "patch"]
+- apiGroups: [""]
+  resources: ["services"]
+  verbs: ["get", "create", "update", "patch"]
+- apiGroups: [""]
+  resources: ["configmaps"]
+  verbs: ["get", "create", "update", "patch"]
+- apiGroups: ["extensions", "apps"]
+  resources: ["ingresses"]
+  verbs: ["get", "create", "update", "patch"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: travis-role-binding
+  namespace: atat
+subjects:
+- kind: ServiceAccount
+  name: atat-deployer
+  namespace: atat
+roleRef:
+  kind: Role
+  name: travis-deploy-role
+  apiGroup: rbac.authorization.k8s.io