Merge "games/valheim: allow patryk@ and palid@ to administer valheim namespace"

games/valheim/prod.jsonnet

@@ -157,7 +157,20 @@ local kube = import "../../kube/kube.libsonnet";
         },
     },
 
-    ns: kube.Namespace("valheim") {
+    # Make namespace for valheim.
+    ns: kube.Namespace("valheim"),
+
+    # Allow patryk and palid to administer this namespace via the namespace-admin clusterrole.
+    adminRB: top.ns.Contain(kube.RoleBinding("sso:admins")) {
+        subjects: [
+            { apiGroup: "rbac.authorization.k8s.io", kind: "User", name: "%s@hackerspace.pl" % [u] }
+            for u in ["patryk", "palid"]
+        ],
+        roleRef: {
+            apiGroup: "rbac.authorization.k8s.io",
+            kind: "ClusterRole",
+            name: "system:admin-namespace",
+        },
     },
 
     q3k: top.env(top.ns, "q3k") {