diff --git a/components/networking/controllers/base/cilium/kustomization.yaml b/components/networking/controllers/base/cilium/kustomization.yaml index a441c7e..1fb8098 100644 --- a/components/networking/controllers/base/cilium/kustomization.yaml +++ b/components/networking/controllers/base/cilium/kustomization.yaml @@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: kube-system resources: + - rbac.yaml - cilium.yaml diff --git a/components/networking/controllers/base/cilium/rbac.yaml b/components/networking/controllers/base/cilium/rbac.yaml new file mode 100644 index 0000000..c0d9d28 --- /dev/null +++ b/components/networking/controllers/base/cilium/rbac.yaml @@ -0,0 +1,24 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + app.kubernetes.io/component: networking + toolkit.fluxcd.io/tenant: platform-team + name: flux-security +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: cluster-admin +subjects: + - kind: ServiceAccount + name: flux + namespace: kube-system +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: flux + namespace: kube-system + labels: + app.kubernetes.io/component: networking + toolkit.fluxcd.io/tenant: platform-team \ No newline at end of file