Skip to content

Commit

Permalink
Grant nerc-test-people reader access to nerc-test-cluster
Browse files Browse the repository at this point in the history
Update the oauth configuration to permit access by the nerc-test-people
group, and grant this group cluster-reader access.
  • Loading branch information
larsks committed Dec 16, 2024
1 parent 2d83559 commit d60bd75
Show file tree
Hide file tree
Showing 3 changed files with 18 additions and 0 deletions.
2 changes: 2 additions & 0 deletions cluster-scope/overlays/nerc-ocp-test/kustomization.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@ resources:
- nodenetworkconfigurationpolicies
- feature/odf
- feature/rhoai
- rbac
- ../../bundles/clusterissuer-http01
- ../../bundles/gatekeeper-operator
- ../../bundles/hostpath-provisioner
Expand Down Expand Up @@ -73,6 +74,7 @@ patches:
- ocp-on-nerc/nerc-ops
- ocp-on-nerc/nerc-logs-metrics
- ocp-on-nerc/nerc-rhods
- ocp-on-nerc/nerc-test-people
- target:
kind: ExternalSecret
name: github-client-secret
Expand Down
4 changes: 4 additions & 0 deletions cluster-scope/overlays/nerc-ocp-test/rbac/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- nerc-test-people.yaml
12 changes: 12 additions & 0 deletions cluster-scope/overlays/nerc-ocp-test/rbac/nerc-test-people.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: nerc-test-people-readers
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-reader
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: nerc-test-people

0 comments on commit d60bd75

Please sign in to comment.