local kube = import "../../kube/kube.libsonnet";

// Global resources specific to Matrix deployments. Currently this is only RBAC objects.

{
    // Allow non-staff admin access to matrix.0x3c.pl.
    admin0x3c: kube.RoleBinding("admins") {
        metadata+: {
            namespace: "matrix-0x3c",
        },
        roleRef: {
            apiGroup: "rbac.authorization.k8s.io",
            kind: "ClusterRole",
            name: "system:admin-namespace",
        },
        subjects: [
            {
                apiGroup: "rbac.authorization.k8s.io",
                kind: "User",
                name: "not7cd@hackerspace.pl",
            },
        ],
    },
}