From f0a38ba7618289d5a961d63b54e1187ce6d28480 Mon Sep 17 00:00:00 2001
From: Serge Bazanski <q3k@hackerspace.pl>
Date: Wed, 21 Jul 2021 14:56:25 +0000
Subject: [PATCH] minecraft: allow enleth@ to administer namespace

Change-Id: I149a01b5d216f112f3e4a90da1e833bca5712777
---
 personal/q3k/minecraft/prod.jsonnet | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/personal/q3k/minecraft/prod.jsonnet b/personal/q3k/minecraft/prod.jsonnet
index dfadbc39..8167b08b 100644
--- a/personal/q3k/minecraft/prod.jsonnet
+++ b/personal/q3k/minecraft/prod.jsonnet
@@ -213,6 +213,17 @@ local defaultWorldguardConfig = import "worldguard.libsonnet";
 
     ns: kube.Namespace("minecraft"),
 
+    admins: minecraft.ns.Contain(kube.RoleBinding("admins")) {
+        roleRef: {
+            apiGroup: "rbac.authorization.k8s.io",
+            kind: "ClusterRole",
+            name: "system:admin-namespace",
+        },
+        subjects: [
+            kube.User("enleth@hackerspace.pl"),
+        ],
+    },
+
     q3k: {
         "nova-arcana": minecraft.server("q3k-nova-arcana", "paper-1.16.5") {
             overviewer: false,