From a7450a8af2f0706a4f480b08c55bb47fb09032b6 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 22 Jan 2024 16:59:53 -0600
Subject: [PATCH] kitchen: Fix Jenkins deployment role

Since Jenkins jobs run in Kubernetes now, they can authenticate to the
Kubernetes API using a ServiceAccount and do not need a dedicated
User.
---
 kitchen/kitchen.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/kitchen/kitchen.yaml b/kitchen/kitchen.yaml
index d238f5f..fc3c9bf 100644
--- a/kitchen/kitchen.yaml
+++ b/kitchen/kitchen.yaml
@@ -131,6 +131,6 @@ roleRef:
   kind: Role
   name: jenkins
 subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: User
-  name: jenkins
+- kind: ServiceAccount
+  name: default
+  namespace: jenkins-jobs