fix namespace
This commit is contained in:
@@ -14,7 +14,7 @@ metadata:
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: stage-editor
|
||||
namespace: ontime-operator-system
|
||||
namespace: ontime-operator
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: ontime-operator-stage-editor-role
|
||||
@@ -27,7 +27,7 @@ metadata:
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: stage-editor
|
||||
namespace: ontime-operator-system
|
||||
namespace: ontime-operator
|
||||
roleRef:
|
||||
kind: ClusterRole
|
||||
name: edit-namespaces
|
||||
|
||||
@@ -12,7 +12,7 @@ spec:
|
||||
resources: ["namespaces"]
|
||||
matchConditions:
|
||||
- name: 'only-stage-editor'
|
||||
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator-system:stage-editor'"
|
||||
expression: "request.userInfo.username == 'system:serviceaccount:ontime-operator:stage-editor'"
|
||||
validations:
|
||||
- expression: "object.metadata.name.startsWith('team-')"
|
||||
message: "All namespaces managed by stage-editor must start with 'team-'"
|
||||
|
||||
@@ -2,4 +2,4 @@ apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: stage-editor
|
||||
namespace: ontime-operator-system
|
||||
namespace: ontime-operator
|
||||
Reference in New Issue
Block a user