class JobWithServiceAccount

A one-shot Job plus the ServiceAccount/Role/RoleBinding it runs as, bundled into one Manifest. The RBAC rules use the Role shorthand; the Job's serviceAccountName is wired to the generated ServiceAccount. Everything is named after +name+.

JobWithServiceAccount.new( name: "glauth-config-seed", image: "nixery.dev/shell/kubectl", rules: [ "batch/cronjobs" => %w[get], "batch/jobs" => %w[create], ], command: BashScript(<<~'SEED'), ... SEED )