adding edit perms for dedicated-admins

rewantsoni · Nov 4, 2021 · b9d63ee · b9d63ee
1 parent 2677174
commit b9d63ee
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 0 deletions.
diff --git a/...ifests/dbaas-operator-edit-dedicated-admins_rbac.authorization.k8s.io_v1_rolebinding.yaml b/...ifests/dbaas-operator-edit-dedicated-admins_rbac.authorization.k8s.io_v1_rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  creationTimestamp: null
+  name: dbaas-operator-edit-dedicated-admins
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: edit
+subjects:
+- apiGroup: rbac.authorization.k8s.io
+  kind: Group
+  name: dedicated-admins
diff --git a/config/rbac/dedicated_admin_namespace_edit_role_binding.yaml b/config/rbac/dedicated_admin_namespace_edit_role_binding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: edit-dedicated-admins
+  namespace: redhat-dbaas-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: edit
+subjects:
+  - apiGroup: rbac.authorization.k8s.io
+    kind: Group
+    name: dedicated-admins
diff --git a/config/rbac/kustomization.yaml b/config/rbac/kustomization.yaml
@@ -12,6 +12,7 @@ resources:
 - dbaasprovider_viewer_role.yaml
 - dbaasprovider_viewer_role_binding.yaml
 - dbaasconnection_viewer_role.yaml
+- dedicated_admin_namespace_edit_role_binding.yaml
 # Comment the following 4 lines if you want to disable
 # the auth proxy (https://github.com/brancz/kube-rbac-proxy)
 # which protects your /metrics endpoint.