commit 937722e465c8f85c0c1272ac6470dbe4d8b83f2f
author Serge Bazanski <q3k@hackerspace.pl> Fri Sep 22 22:29:54 2023 +0000
committer radex <radex@hackerspace.pl> Fri Sep 22 22:49:05 2023 +0000
tree 2709ac89eaa0c2d48a7efb9cc0472ee6e128ab98
parent c5f466822efe60783dc619f12cb2b266c84709b1

hswaw/ldapweb: give admin rights to radex

Change-Id: I5d0ce4b500e7d9c9750dc5f306ea182013362838
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1627
Reviewed-by: radex <radex@hackerspace.pl>

hswaw/ldapweb/prod.jsonnet

diff --git a/hswaw/ldapweb/prod.jsonnet b/hswaw/ldapweb/prod.jsonnet
index 00f3cca..a7e5c2a 100644
--- a/hswaw/ldapweb/prod.jsonnet
+++ b/hswaw/ldapweb/prod.jsonnet
@@ -152,4 +152,16 @@
             |||,
         },
     },
+
+    admins: top.ns.Contain(kube.RoleBinding("admins")) {
+        roleRef: {
+            apiGroup: "rbac.authorization.k8s.io",
+            kind: "ClusterRole",
+            name: "system:admin-namespace",
+        },
+        subjects: [
+            kube.User("radex@hackerspace.pl"),
+        ],
+},
+
 }