feat(deploy): move deploy resources into single file (#5)

external-secrets.yml

@@ -0,0 +1,69 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: kubernetes-external-secrets-cluster-role-binding
+subjects:
+- kind: ServiceAccount
+  name: kubernetes-external-secrets-service-account
+  namespace: kubernetes-external-secrets
+roleRef:
+  kind: ClusterRole
+  name: kubernetes-external-secrets-cluster-role
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubernetes-external-secrets-cluster-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - "*"
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - list
+- apiGroups: ["apiextensions.k8s.io"]
+  resources: ["customresourcedefinitions"]
+  verbs: ["create", "get", "update"]
+- apiGroups: ["kubernetes-client.io"]
+  resources: ["externalsecrets"]
+  verbs: ["*"]
+- apiGroups: ["apps"]
+  resources: ["deployments"]
+  verbs: ["*"]
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kubernetes-external-secrets-service-account
+  namespace: kubernetes-external-secrets
+---
+apiVersion: extensions/v1beta1
+kind: Deployment
+metadata:
+  labels:
+    name: kubernetes-external-secrets
+  name: kubernetes-external-secrets
+  namespace: kubernetes-external-secrets
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      name: kubernetes-external-secrets
+  template:
+    metadata:
+      labels:
+        name: kubernetes-external-secrets
+        service: kubernetes-external-secrets
+    spec:
+      serviceAccountName: kubernetes-external-secrets-service-account
+      containers:
+        - image: "godaddy/kubernetes-external-secrets"
+          imagePullPolicy: Always
+          name: kubernetes-external-secrets