remove hardcoded admin from weave

test

test 2

test 3

test-4

re add user

stuff

disable admin

add rbac

fix rbac

fix rba 1c

fix rba 12c
This commit is contained in:
Vivian 2023-05-11 14:22:44 +02:00
parent 9b44670196
commit 825323e99d
2 changed files with 4 additions and 4 deletions

View file

@ -3,7 +3,7 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
metadata: metadata:
name: wego-admin-cluster-role name: weave-admin
rules: rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["secrets", "pods" ] resources: ["secrets", "pods" ]
@ -28,12 +28,12 @@ rules:
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: wego-cluster-admin name: weave-admin
subjects: subjects:
- kind: User - kind: User
name: "victor@xirion.net" name: "victor@xirion.net"
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole
name: wego-admin-cluster-role name: weave-admin
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io

View file

@ -42,7 +42,7 @@ spec:
- path: / - path: /
pathType: ImplementationSpecific pathType: ImplementationSpecific
adminUser: adminUser:
create: true create: false
passwordHash: $2a$10$uIY/YYe.CcRerpVvfk04muX86hLfXRH.K6jATZaVPqp.bnUIu/bsC passwordHash: $2a$10$uIY/YYe.CcRerpVvfk04muX86hLfXRH.K6jATZaVPqp.bnUIu/bsC
username: admin username: admin