Refactor structure

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
Stefan Prodan 2024-04-10 12:55:53 +03:00
parent 2f9057e96b
commit 98577807dd
No known key found for this signature in database
GPG key ID: 3299AEB0E4085BAF
17 changed files with 35 additions and 21 deletions

37
deploy/tenants/flux.yaml Normal file
View file

@ -0,0 +1,37 @@
apiVersion: v1
kind: Namespace
metadata:
name: "${CLUSTER_NAME}"
labels:
toolkit.fluxcd.io/tenant: sre-team
---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
toolkit.fluxcd.io/tenant: sre-team
name: flux-restricted
namespace: "${CLUSTER_NAME}"
---
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
toolkit.fluxcd.io/tenant: sre-team
name: flux-cluster-admin
namespace: "${CLUSTER_NAME}"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
toolkit.fluxcd.io/tenant: sre-team
name: flux-cluster-admin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: flux-cluster-admin
namespace: "${CLUSTER_NAME}"