mirror of
https://github.com/fluxcd/flux2-hub-spoke-example.git
synced 2025-07-28 08:12:53 +00:00
Refactor structure
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
parent
2f9057e96b
commit
98577807dd
17 changed files with 35 additions and 21 deletions
24
deploy/tenants/podinfo.yaml
Normal file
24
deploy/tenants/podinfo.yaml
Normal file
|
@ -0,0 +1,24 @@
|
|||
apiVersion: v1
|
||||
kind: Namespace
|
||||
metadata:
|
||||
name: podinfo
|
||||
labels:
|
||||
toolkit.fluxcd.io/tenant: dev-team
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
labels:
|
||||
toolkit.fluxcd.io/tenant: dev-team
|
||||
name: flux
|
||||
namespace: podinfo
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
# This binding limits the access to the current namespace
|
||||
# being a RoleBinding instead of a ClusterRoleBinding
|
||||
name: cluster-admin
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: flux-restricted
|
||||
namespace: "${CLUSTER_NAME}"
|
Loading…
Add table
Add a link
Reference in a new issue