diff --git a/games/valheim/prod.jsonnet b/games/valheim/prod.jsonnet index 1ec9409d..9f0f421d 100644 --- a/games/valheim/prod.jsonnet +++ b/games/valheim/prod.jsonnet @@ -157,7 +157,20 @@ local kube = import "../../kube/kube.libsonnet"; }, }, - ns: kube.Namespace("valheim") { + # Make namespace for valheim. + ns: kube.Namespace("valheim"), + + # Allow patryk and palid to administer this namespace via the namespace-admin clusterrole. + adminRB: top.ns.Contain(kube.RoleBinding("sso:admins")) { + subjects: [ + { apiGroup: "rbac.authorization.k8s.io", kind: "User", name: "%s@hackerspace.pl" % [u] } + for u in ["patryk", "palid"] + ], + roleRef: { + apiGroup: "rbac.authorization.k8s.io", + kind: "ClusterRole", + name: "system:admin-namespace", + }, }, q3k: top.env(top.ns, "q3k") {