Merge "games/valheim: allow patryk@ and palid@ to administer valheim namespace"

This commit is contained in:
q3k 2021-03-06 22:17:05 +00:00 committed by Gerrit Code Review
commit a5691b54cc

View file

@ -157,7 +157,20 @@ local kube = import "../../kube/kube.libsonnet";
},
},
ns: kube.Namespace("valheim") {
# Make namespace for valheim.
ns: kube.Namespace("valheim"),
# Allow patryk and palid to administer this namespace via the namespace-admin clusterrole.
adminRB: top.ns.Contain(kube.RoleBinding("sso:admins")) {
subjects: [
{ apiGroup: "rbac.authorization.k8s.io", kind: "User", name: "%s@hackerspace.pl" % [u] }
for u in ["patryk", "palid"]
],
roleRef: {
apiGroup: "rbac.authorization.k8s.io",
kind: "ClusterRole",
name: "system:admin-namespace",
},
},
q3k: top.env(top.ns, "q3k") {