Serge Bazanski | 21e9f7a | 2020-11-11 23:39:48 +0100 | [diff] [blame] | 1 | local kube = import "../../kube/kube.libsonnet"; |
| 2 | |
| 3 | // Global resources specific to Matrix deployments. Currently this is only RBAC objects. |
| 4 | |
| 5 | { |
| 6 | // Allow non-staff admin access to matrix.0x3c.pl. |
| 7 | admin0x3c: kube.RoleBinding("admins") { |
| 8 | metadata+: { |
| 9 | namespace: "matrix-0x3c", |
| 10 | }, |
| 11 | roleRef: { |
| 12 | apiGroup: "rbac.authorization.k8s.io", |
| 13 | kind: "ClusterRole", |
| 14 | name: "system:admin-namespace", |
| 15 | }, |
| 16 | subjects: [ |
| 17 | { |
| 18 | apiGroup: "rbac.authorization.k8s.io", |
| 19 | kind: "User", |
| 20 | name: "not7cd@hackerspace.pl", |
| 21 | }, |
| 22 | ], |
| 23 | }, |
| 24 | } |