From 937722e465c8f85c0c1272ac6470dbe4d8b83f2f Mon Sep 17 00:00:00 2001
From: Serge Bazanski <q3k@hackerspace.pl>
Date: Fri, 22 Sep 2023 22:29:54 +0000
Subject: [PATCH] hswaw/ldapweb: give admin rights to radex

Change-Id: I5d0ce4b500e7d9c9750dc5f306ea182013362838
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1627
Reviewed-by: radex <radex@hackerspace.pl>
---
 hswaw/ldapweb/prod.jsonnet | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/hswaw/ldapweb/prod.jsonnet b/hswaw/ldapweb/prod.jsonnet
index 00f3cca0..a7e5c2a8 100644
--- a/hswaw/ldapweb/prod.jsonnet
+++ b/hswaw/ldapweb/prod.jsonnet
@@ -152,4 +152,16 @@ local kube = import "../../kube/kube.libsonnet";
             |||,
         },
     },
+
+    admins: top.ns.Contain(kube.RoleBinding("admins")) {
+        roleRef: {
+            apiGroup: "rbac.authorization.k8s.io",
+            kind: "ClusterRole",
+            name: "system:admin-namespace",
+        },
+        subjects: [
+            kube.User("radex@hackerspace.pl"),
+        ],
+},
+
 }