From b2e56487d1a0f5bae4255525a76fc131cdf9a78f Mon Sep 17 00:00:00 2001 From: Joel Wetzell Date: Tue, 28 Oct 2025 13:07:29 -0500 Subject: [PATCH] use existing cluster-role --- apps/stage-maker/cluster-role-binding.yaml | 13 ++++++++ apps/stage-maker/cluster-role.yaml | 36 ---------------------- apps/stage-maker/kustomization.yaml | 1 - 3 files changed, 13 insertions(+), 37 deletions(-) create mode 100644 apps/stage-maker/cluster-role-binding.yaml delete mode 100644 apps/stage-maker/cluster-role.yaml diff --git a/apps/stage-maker/cluster-role-binding.yaml b/apps/stage-maker/cluster-role-binding.yaml new file mode 100644 index 0000000..5bbf1e0 --- /dev/null +++ b/apps/stage-maker/cluster-role-binding.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: edit-stages-clusterrolebinding +subjects: +- kind: ServiceAccount + name: stage-editor + namespace: stage-maker +roleRef: + kind: ClusterRole + name: ontime-operator-stage-editor-role + apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/apps/stage-maker/cluster-role.yaml b/apps/stage-maker/cluster-role.yaml deleted file mode 100644 index 9f3fef8..0000000 --- a/apps/stage-maker/cluster-role.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: stage-editor-role -rules: -- apiGroups: - - ontime.getontime.no - resources: - - stages - verbs: - - create - - delete - - get - - list - - patch - - update - - watch -- apiGroups: - - ontime.getontime.no - resources: - - stages/status - verbs: - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: edit-stages-clusterrolebinding -subjects: -- kind: ServiceAccount - name: stage-editor - namespace: stage-maker -roleRef: - kind: ClusterRole - name: stage-editor-role - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/apps/stage-maker/kustomization.yaml b/apps/stage-maker/kustomization.yaml index dd2058c..fc2f687 100644 --- a/apps/stage-maker/kustomization.yaml +++ b/apps/stage-maker/kustomization.yaml @@ -4,6 +4,5 @@ resources: - namespace.yaml - deployment.yaml - ingress.yaml - - cluster-role.yaml - service-account.yaml - service.yaml