added rbac for storage ns

This commit is contained in:
V 2025-12-06 14:30:30 +00:00
parent 0fa7f5c1d5
commit 25ed30fd7e
2 changed files with 25 additions and 0 deletions

View File

@ -3,5 +3,6 @@ kind: Kustomization
namespace: storage
resources:
- namespace.yaml
- rbac.yaml
- nfs-config.yaml
- nfs-subdir-external-provisioner.yaml

View File

@ -0,0 +1,24 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
labels:
app.kubernetes.io/component: storage
toolkit.fluxcd.io/tenant: platform-team
name: flux-storage
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: flux
namespace: storage
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: flux
namespace: storage
labels:
app.kubernetes.io/component: storage
toolkit.fluxcd.io/tenant: platform-team