Refactor structure

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
Stefan Prodan 2024-04-10 12:55:53 +03:00
parent 2f9057e96b
commit 98577807dd
No known key found for this signature in database
GPG key ID: 3299AEB0E4085BAF
17 changed files with 35 additions and 21 deletions

View file

@ -1,7 +1,7 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../apps
- ../../../deploy/apps
patches:
- path: podinfo-values.yaml
target:

View file

@ -1,4 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../infrastructure/configs
- ../../../deploy/infra-configs

View file

@ -1,4 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../../infrastructure/controllers
- ../../../deploy/infra-controllers

View file

@ -1,7 +0,0 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager
labels:
toolkit.fluxcd.io/tenant: sre-team

View file

@ -1,37 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: staging
labels:
toolkit.fluxcd.io/tenant: admin-team
---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
toolkit.fluxcd.io/tenant: admin-team
name: flux-restricted
namespace: staging
---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
toolkit.fluxcd.io/tenant: admin-team
name: flux-cluster-admin
namespace: staging
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
toolkit.fluxcd.io/tenant: admin-team
name: flux-cluster-admin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: flux-cluster-admin
namespace: staging

View file

@ -1,8 +0,0 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: ingress-nginx
labels:
toolkit.fluxcd.io/tenant: sre-team

View file

@ -0,0 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../../deploy/tenants

View file

@ -1,24 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: podinfo
labels:
toolkit.fluxcd.io/tenant: dev-team
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
toolkit.fluxcd.io/tenant: dev-team
name: flux
namespace: podinfo
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
# This binding limits the access to the current namespace
# being a RoleBinding instead of a ClusterRoleBinding
name: cluster-admin
subjects:
- kind: ServiceAccount
name: flux-restricted
namespace: staging