allow konflux-core team to manage workspaces CRD (#4691)

Signed-off-by: Francesco Ilario <filario@redhat.com>
redhat-appstudio · Oct 14, 2024 · 0a4ce91 · 0a4ce91
1 parent 0f168fa
commit 0a4ce91
Show file tree

Hide file tree

Showing 9 changed files with 36 additions and 1 deletion.
diff --git a/components/workspaces/production/stone-prd-host1/kustomization.yaml b/components/workspaces/production/stone-prd-host1/kustomization.yaml
@@ -3,6 +3,7 @@ kind: Kustomization
 resources:
 - ../../base/
 - route.yaml
+- ../../team
 images:
 - name: quay.io/konflux-workspaces/workspaces-server
   newTag: v0.1.0-alpha7

diff --git a/components/workspaces/production/stone-prod-p01/kustomization.yaml b/components/workspaces/production/stone-prod-p01/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../../base/
+- ../../team
 images:
 - name: quay.io/konflux-workspaces/workspaces-server
   newTag: v0.1.0-alpha7

diff --git a/components/workspaces/production/stone-prod-p02/kustomization.yaml b/components/workspaces/production/stone-prod-p02/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../../base/
+- ../../team
 images:
 - name: quay.io/konflux-workspaces/workspaces-server
   newTag: v0.1.0-alpha7

diff --git a/components/workspaces/staging/stone-stage-p01/kustomization.yaml b/components/workspaces/staging/stone-stage-p01/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../../base/
+- ../../team
 images:
 - name: quay.io/konflux-workspaces/workspaces-server
   newTag: v0.1.0-alpha7

diff --git a/components/workspaces/staging/stone-stg-host/kustomization.yaml b/components/workspaces/staging/stone-stg-host/kustomization.yaml
@@ -3,6 +3,7 @@ kind: Kustomization
 resources:
 - ../../base/
 - route.yaml
+- ../../team
 images:
 - name: quay.io/konflux-workspaces/workspaces-server
   newTag: v0.1.0-alpha7

diff --git a/components/workspaces/staging/stone-stg-rh01/kustomization.yaml b/components/workspaces/staging/stone-stg-rh01/kustomization.yaml
@@ -2,4 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../../base/server/config/crd/
-
+- ../../team
diff --git a/components/workspaces/team/kustomization.yaml b/components/workspaces/team/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- workspaces-team-role.yaml
+- workspaces-team-rolebinding.yaml
diff --git a/components/workspaces/team/workspaces-team-role.yaml b/components/workspaces/team/workspaces-team-role.yaml
@@ -0,0 +1,12 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: workspaces-service-maintainer
+rules:
+- apiGroups:
+  - workspaces.konflux-ci.dev
+  resources:
+  - '*'
+  verbs:
+  - '*'
diff --git a/components/workspaces/team/workspaces-team-rolebinding.yaml b/components/workspaces/team/workspaces-team-rolebinding.yaml
@@ -0,0 +1,13 @@
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: workspaces-service-maintainer
+subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: konflux-core
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: workspaces-service-maintainer