jwetzell/ontime-k8s
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix namespace

Browse Source
This commit is contained in:
Joel Wetzell
2025-10-28 17:20:22 -05:00
parent 71bcb4a33e
commit 84ea562c36
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
infrastructure/ontime-operator/cluster-role-binding.yaml
View File

@@ -14,7 +14,7 @@ metadata:
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: stage-editor name: stage-editor
namespace: ontime-operator-system namespace: ontime-operator
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole
name: ontime-operator-stage-editor-role name: ontime-operator-stage-editor-role
@@ -27,7 +27,7 @@ metadata:
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: stage-editor name: stage-editor
namespace: ontime-operator-system namespace: ontime-operator
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole
name: edit-namespaces name: edit-namespaces

2
infrastructure/ontime-operator/namespace-prefix-policy.yaml
View File

@@ -12,7 +12,7 @@ spec:
resources: ["namespaces"] resources: ["namespaces"]
matchConditions: matchConditions:
- name: 'only-stage-editor' - name: 'only-stage-editor'
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator-system:stage-editor'" expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
validations: validations:
- expression: "object.metadata.name.startsWith('team-')" - expression: "object.metadata.name.startsWith('team-')"
message: "All namespaces managed by stage-editor must start with 'team-'" message: "All namespaces managed by stage-editor must start with 'team-'"

2
infrastructure/ontime-operator/service-account.yaml
View File

@@ -2,4 +2,4 @@ apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: stage-editor name: stage-editor
namespace: ontime-operator-system namespace: ontime-operator