mirror of
https://github.com/fluxcd/flux2-hub-spoke-example.git
synced 2025-07-27 15:53:19 +00:00
Add SA for apps impersonation
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
parent
6ae2c0d4e4
commit
b0686db68f
2 changed files with 16 additions and 10 deletions
|
@ -5,14 +5,6 @@ metadata:
|
||||||
labels:
|
labels:
|
||||||
toolkit.fluxcd.io/tenant: dev-team
|
toolkit.fluxcd.io/tenant: dev-team
|
||||||
---
|
---
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
toolkit.fluxcd.io/tenant: dev-team
|
|
||||||
name: flux
|
|
||||||
namespace: podinfo
|
|
||||||
---
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
|
@ -28,5 +20,5 @@ roleRef:
|
||||||
name: cluster-admin
|
name: cluster-admin
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: flux
|
name: flux-apps
|
||||||
namespace: podinfo
|
namespace: staging
|
||||||
|
|
14
clusters/staging/tenants/staging.yaml
Normal file
14
clusters/staging/tenants/staging.yaml
Normal file
|
@ -0,0 +1,14 @@
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: staging
|
||||||
|
labels:
|
||||||
|
toolkit.fluxcd.io/tenant: dev-team
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ServiceAccount
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
toolkit.fluxcd.io/tenant: dev-team
|
||||||
|
name: flux-apps
|
||||||
|
namespace: staging
|
Loading…
Add table
Add a link
Reference in a new issue