feat(init_containers_migrations_deploy.yml): Move RBAC after deployment

Author: ondrejsika

init_containers_migrations_deploy.yml

@@ -1,30 +1,3 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: job-read
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: job-read
-rules:
-  - apiGroups: ["batch"]
-    resources: ["jobs"]
-    resourceNames: ["sleep20s"]
-    verbs: ["get", "list", "watch"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: job-read
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: job-read
-subjects:
-  - kind: ServiceAccount
-    name: job-read
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -61,3 +34,30 @@ spec:
             limits:
               memory: 100Mi
               cpu: 20m
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: job-read
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: job-read
+rules:
+  - apiGroups: ["batch"]
+    resources: ["jobs"]
+    resourceNames: ["sleep20s"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: job-read
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: job-read
+subjects:
+  - kind: ServiceAccount
+    name: job-read