From 165a591000d7608c2c8599eccb1200e6706cb6dd Mon Sep 17 00:00:00 2001 From: Miranda Christ Date: Wed, 24 Jul 2019 16:24:30 -0700 Subject: [PATCH] Enable directly rerunning jobs via Deck --- prow/cluster/deck_deployment.yaml | 1 + prow/cluster/deck_rbac.yaml | 5 +---- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/prow/cluster/deck_deployment.yaml b/prow/cluster/deck_deployment.yaml index 3786a99ec334..af3ba8208216 100644 --- a/prow/cluster/deck_deployment.yaml +++ b/prow/cluster/deck_deployment.yaml @@ -52,6 +52,7 @@ spec: - --config-path=/etc/config/config.yaml - --job-config-path=/etc/job-config - --spyglass=true + - --rerun-creates-job volumeMounts: - name: oauth-config mountPath: /etc/github diff --git a/prow/cluster/deck_rbac.yaml b/prow/cluster/deck_rbac.yaml index a8616d329baa..f9c3edbcdf37 100644 --- a/prow/cluster/deck_rbac.yaml +++ b/prow/cluster/deck_rbac.yaml @@ -18,10 +18,7 @@ rules: - get - list # Required when deck runs with `--rerun-creates-job=true` - # **Warning:** Only use this for non-public deck instances, this allows - # anyone with access to your Deck instance to create new Prowjobs. - # Additionally, there is not yet protection against CSRF. Use with caution - # - create + - create --- kind: Role apiVersion: rbac.authorization.k8s.io/v1beta1