From 640ff61422bc0ee3966941b93d9889ddbbd38d77 Mon Sep 17 00:00:00 2001 From: ckonstanski Date: Thu, 30 Jul 2026 18:17:14 -0600 Subject: more files --- .../cluster-setup-files/samsung-sa.yaml | 55 ++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100644 src/orchestration/cluster-setup-files/samsung-sa.yaml (limited to 'src/orchestration/cluster-setup-files/samsung-sa.yaml') diff --git a/src/orchestration/cluster-setup-files/samsung-sa.yaml b/src/orchestration/cluster-setup-files/samsung-sa.yaml new file mode 100644 index 0000000..2525e8b --- /dev/null +++ b/src/orchestration/cluster-setup-files/samsung-sa.yaml @@ -0,0 +1,55 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{application_sa}} + namespace: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{application_sa}}-rb + namespace: {{ namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: edit +subjects: + - kind: ServiceAccount + name: {{application_sa}} + namespace: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{crd_cluster_role}}-for-app-team +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ crd_cluster_role }}-application +subjects: + - kind: ServiceAccount + name: {{application_sa}} + namespace: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ crd_cluster_role }}-application +rules: + - apiGroups: ["{{ crd_api_group }}"] + resources: ["{{ crd_api_resources }}"] + verbs: ["get", "list", "watch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: crd-rb-app +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: crd-view +subjects: + - kind: ServiceAccount + name: {{ application_sa }} + namespace: default +--- -- cgit v1.3