From 654731b7ef951c24f4e6816b1bc84d7a761bc504 Mon Sep 17 00:00:00 2001 From: Nikolai Rodionov Date: Sat, 4 Nov 2023 19:54:19 +0100 Subject: [PATCH] Add some manifests for badhouseplants --- .../badhouseplants/namespace-creator-binding.yaml | 12 ++++++++++++ manifests/badhouseplants/namespace-creator-role.yaml | 8 ++++++++ 2 files changed, 20 insertions(+) create mode 100644 manifests/badhouseplants/namespace-creator-binding.yaml create mode 100644 manifests/badhouseplants/namespace-creator-role.yaml diff --git a/manifests/badhouseplants/namespace-creator-binding.yaml b/manifests/badhouseplants/namespace-creator-binding.yaml new file mode 100644 index 0000000..d24486c --- /dev/null +++ b/manifests/badhouseplants/namespace-creator-binding.yaml @@ -0,0 +1,12 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: namespace-manager +subjects: + - kind: User + name: badhousplants + apiGroup: rbac.authorization.k8s.io +roleRef: + kind: ClusterRole + name: namespace-manager + apiGroup: rbac.authorization.k8s.io diff --git a/manifests/badhouseplants/namespace-creator-role.yaml b/manifests/badhouseplants/namespace-creator-role.yaml new file mode 100644 index 0000000..c552be6 --- /dev/null +++ b/manifests/badhouseplants/namespace-creator-role.yaml @@ -0,0 +1,8 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: namespace-manager +rules: + - apiGroups: [""] + resources: ["namespaces"] + verbs: ["get", "watch", "list", "create", "delete"]