commit f0a38ba7618289d5a961d63b54e1187ce6d28480
author Serge Bazanski <q3k@hackerspace.pl> Wed Jul 21 14:56:25 2021 +0000
committer q3k <q3k@hackerspace.pl> Wed Jul 21 14:57:37 2021 +0000
tree c85e893c6c302aa9c44dd45d4b47522b17d86d42
parent 4afed98e4eef3ff7074a05595a569d1ef581fc40

minecraft: allow enleth@ to administer namespace

Change-Id: I149a01b5d216f112f3e4a90da1e833bca5712777

personal/q3k/minecraft/prod.jsonnet

diff --git a/personal/q3k/minecraft/prod.jsonnet b/personal/q3k/minecraft/prod.jsonnet
index dfadbc3..8167b08 100644
--- a/personal/q3k/minecraft/prod.jsonnet
+++ b/personal/q3k/minecraft/prod.jsonnet
@@ -213,6 +213,17 @@
 
     ns: kube.Namespace("minecraft"),
 
+    admins: minecraft.ns.Contain(kube.RoleBinding("admins")) {
+        roleRef: {
+            apiGroup: "rbac.authorization.k8s.io",
+            kind: "ClusterRole",
+            name: "system:admin-namespace",
+        },
+        subjects: [
+            kube.User("enleth@hackerspace.pl"),
+        ],
+    },
+
     q3k: {
         "nova-arcana": minecraft.server("q3k-nova-arcana", "paper-1.16.5") {
             overviewer: false,