v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions 1 Packages Projects Releases Activity

fix yamllint

Browse source
This commit is contained in:
Vivian 2023-05-12 09:18:19 +02:00
parent 9f9058e3c0
commit 80e52ba650
2 changed files with 62 additions and 46 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

84
flux/olympus/apps/flux-system/rbac.yaml
View file

@ -5,43 +5,59 @@ kind: ClusterRole
metadata: metadata:
name: weave-admin name: weave-admin
rules: rules:
# Flux Resources # Flux Resources
- apiGroups: ["kustomize.toolkit.fluxcd.io"] - apiGroups: ["kustomize.toolkit.fluxcd.io"]
resources: [ "kustomizations" ] resources: ["kustomizations"]
verbs: [ "get", "list", "patch" ] verbs: ["get", "list", "patch"]
- apiGroups: ["helm.toolkit.fluxcd.io"] - apiGroups: ["helm.toolkit.fluxcd.io"]
resources: [ "helmreleases" ] resources: ["helmreleases"]
verbs: [ "get", "list", "patch" ] verbs: ["get", "list", "patch"]
- apiGroups: ["source.toolkit.fluxcd.io"] - apiGroups: ["source.toolkit.fluxcd.io"]
resources: [ "buckets", "helmcharts", "gitrepositories", "helmrepositories", "ocirepositories" ] resources:
verbs: [ "get", "list", "patch" ] [
- apiGroups: [ "notification.toolkit.fluxcd.io" ] "buckets",
resources: [ "providers", "alerts" ] "helmcharts",
verbs: [ "get", "list" ] "gitrepositories",
- apiGroups: ["infra.contrib.fluxcd.io"] "helmrepositories",
"ocirepositories",
]
verbs: ["get", "list", "patch"]
- apiGroups: ["notification.toolkit.fluxcd.io"]
resources: ["providers", "alerts"]
verbs: ["get", "list"]
- apiGroups: ["infra.contrib.fluxcd.io"]
resources: ["terraforms"] resources: ["terraforms"]
verbs: [ "get", "list", "patch" ] verbs: ["get", "list", "patch"]
# Resources managed via Flux # Resources managed via Flux
- apiGroups: [""] - apiGroups: [""]
resources: ["configmaps", "secrets", "pods", "services", "namespaces", "persistentvolumes", "persistentvolumeclaims"] resources:
verbs: [ "get", "list" ] [
- apiGroups: ["apps"] "configmaps",
resources: [ "deployments", "replicasets", "statefulsets"] "secrets",
verbs: [ "get", "list" ] "pods",
- apiGroups: ["batch"] "services",
resources: [ "jobs", "cronjobs"] "namespaces",
verbs: [ "get", "list" ] "persistentvolumes",
- apiGroups: ["autoscaling"] "persistentvolumeclaims",
]
verbs: ["get", "list"]
- apiGroups: ["apps"]
resources: ["deployments", "replicasets", "statefulsets"]
verbs: ["get", "list"]
- apiGroups: ["batch"]
resources: ["jobs", "cronjobs"]
verbs: ["get", "list"]
- apiGroups: ["autoscaling"]
resources: ["horizontalpodautoscalers"] resources: ["horizontalpodautoscalers"]
verbs: [ "get", "list" ] verbs: ["get", "list"]
- apiGroups: ["rbac.authorization.k8s.io"] - apiGroups: ["rbac.authorization.k8s.io"]
resources: ["roles", "clusterroles", "rolebindings", "clusterrolebindings"] resources: ["roles", "clusterroles", "rolebindings", "clusterrolebindings"]
verbs: [ "get", "list" ] verbs: ["get", "list"]
- apiGroups: ["networking.k8s.io"] - apiGroups: ["networking.k8s.io"]
resources: ["ingresses"] resources: ["ingresses"]
verbs: [ "get", "list" ] verbs: ["get", "list"]
# Feedback # Feedback
- apiGroups: [""] - apiGroups: [""]
resources: ["events"] resources: ["events"]
verbs: ["get", "watch", "list"] verbs: ["get", "watch", "list"]
--- ---
@ -51,7 +67,7 @@ kind: ClusterRoleBinding
metadata: metadata:
name: weave-admin name: weave-admin
subjects: subjects:
- kind: User - kind: User
name: "victor@xirion.net" name: "victor@xirion.net"
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef: