minecraft: allow enleth@ to administer namespace
Change-Id: I149a01b5d216f112f3e4a90da1e833bca5712777
diff --git a/personal/q3k/minecraft/prod.jsonnet b/personal/q3k/minecraft/prod.jsonnet
index dfadbc3..8167b08 100644
--- a/personal/q3k/minecraft/prod.jsonnet
+++ b/personal/q3k/minecraft/prod.jsonnet
@@ -213,6 +213,17 @@
ns: kube.Namespace("minecraft"),
+ admins: minecraft.ns.Contain(kube.RoleBinding("admins")) {
+ roleRef: {
+ apiGroup: "rbac.authorization.k8s.io",
+ kind: "ClusterRole",
+ name: "system:admin-namespace",
+ },
+ subjects: [
+ kube.User("enleth@hackerspace.pl"),
+ ],
+ },
+
q3k: {
"nova-arcana": minecraft.server("q3k-nova-arcana", "paper-1.16.5") {
overviewer: false,