Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat/fix(rbac): use generated RBAC in kustomize and helm, grant access to leases #1540

Merged
merged 8 commits into from
May 20, 2024
Merged

feat/fix(rbac): use generated RBAC in kustomize and helm, grant access to leases #1540

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
f60edf4
feat(kustomize): replace rbac kind on the fly
weisdd May 19, 2024
284c9f7
chore(kustomize): move rolebinding to a separate file, include kubebu…
weisdd May 19, 2024
048ba6e
chore(kustomize): allow to load files without restrictions
weisdd May 19, 2024
047ac55
fix(rbac): generate permissions for leases
weisdd May 19, 2024
b67e441
chore(kustomize): update readme
weisdd May 19, 2024
2c0a145
feat(kustomize): try to build overlays during as part of pr validatio…
weisdd May 19, 2024
9607606
chore(pr-validation): remove unused token
weisdd May 19, 2024
1dec4e4
feat(helm): sync rbac with config/rbac/role.yaml
weisdd May 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
chore(kustomize): move rolebinding to a separate file, include kubebu… 
…ilder role
  • Loading branch information
@weisdd
weisdd committed May 19, 2024
commit 284c9f70614baaa33ab8a68c19c3a5d3b1c7de79
10 changes: 9 additions & 1 deletion deploy/kustomize/base/kustomization.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,4 +4,12 @@ resources:
- serviceaccount.yaml
- service.yaml
- deployment.yaml
- rbac.yaml
- rolebinding.yaml
- ../../../config/rbac/role.yaml
patches:
- target:
kind: ClusterRole
patch: |
- op: replace
path: /metadata/name
value: grafana-operator-permissions
268 changes: 0 additions & 268 deletions deploy/kustomize/base/rbac.yaml
View file
Open in desktop

This file was deleted.

12 changes: 12 additions & 0 deletions deploy/kustomize/base/rolebinding.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: grafana-operator-permissions
subjects:
- kind: ServiceAccount
name: grafana-operator-controller-manager
namespace: default
roleRef:
kind: ClusterRole
name: grafana-operator-permissions
apiGroup: rbac.authorization.k8s.io