mirror of
https://github.com/fluxcd/flux2-hub-spoke-example.git
synced 2025-07-27 15:53:19 +00:00
24 lines
561 B
YAML
24 lines
561 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: podinfo
|
|
labels:
|
|
toolkit.fluxcd.io/tenant: dev-team
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
labels:
|
|
toolkit.fluxcd.io/tenant: dev-team
|
|
name: flux
|
|
namespace: podinfo
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
# This binding limits the access to the current namespace
|
|
# being a RoleBinding instead of a ClusterRoleBinding
|
|
name: cluster-admin
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: flux-restricted
|
|
namespace: "${CLUSTER_NAME}"
|