add cluster role for editing stages

stage-maker/cluster-role.yaml

@@ -0,0 +1,36 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: stage-editor-role
+rules:
+- apiGroups:
+  - ontime.getontime.no
+  resources:
+  - stages
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - ontime.getontime.no
+  resources:
+  - stages/status
+  verbs:
+  - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: edit-stages-clusterrolebinding
+subjects:
+- kind: ServiceAccount
+  name: stage-editor
+  namespace: stage-maker
+roleRef:
+  kind: ClusterRole
+  name: stage-editor-role
+  apiGroup: rbac.authorization.k8s.io

stage-maker/kustomization.yaml

@@ -1,3 +1,5 @@
 resources:
   - namespace.yaml
-  - pod.yaml
+  - pod.yaml
+  - cluster-role.yaml
+  - service-account.yaml

stage-maker/pod.yaml

@@ -4,6 +4,7 @@ metadata:
   name: stage-maker
   namespace: stage-maker
 spec:
+  serviceAccountName: stage-editor
   containers:
   - name: stage-maker
     image: git.jwetzell.com/jwetzell/stage-maker:v0.0.1

stage-maker/service-account.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: stage-editor
+  namespace: stage-maker