From d584c4bc99b09d25b7fd1925174df6e54b90f5c5 Mon Sep 17 00:00:00 2001
From: Andrei Kvapil <kvapss@gmail.com>
Date: Fri, 27 Dec 2024 11:36:06 +0100
Subject: [PATCH] Remove kubeapps-admin role

Signed-off-by: Andrei Kvapil <kvapss@gmail.com>
---
 .../templates/configure-kk.yaml               | 13 ------
 .../templates/rolebinding.yaml                | 32 --------------
 .../keycloak-configure/templates/roles.yaml   | 42 -------------------
 3 files changed, 87 deletions(-)

diff --git a/packages/system/keycloak-configure/templates/configure-kk.yaml b/packages/system/keycloak-configure/templates/configure-kk.yaml
index 9be7c588..75d89e66 100644
--- a/packages/system/keycloak-configure/templates/configure-kk.yaml
+++ b/packages/system/keycloak-configure/templates/configure-kk.yaml
@@ -215,19 +215,6 @@ data:
 
 ---
 
-apiVersion: v1.edp.epam.com/v1
-kind: KeycloakRealmGroup
-metadata:
-  name: kubeapps-admin
-  namespace: cozy-dashboard
-spec:
-  name: kubeapps-admin
-  realmRef:
-    name: keycloakrealm-cozy
-    kind: ClusterKeycloakRealm
-
----
-
 apiVersion: v1.edp.epam.com/v1
 kind: KeycloakRealmGroup
 metadata:
diff --git a/packages/system/keycloak-configure/templates/rolebinding.yaml b/packages/system/keycloak-configure/templates/rolebinding.yaml
index a201cf1b..40628822 100644
--- a/packages/system/keycloak-configure/templates/rolebinding.yaml
+++ b/packages/system/keycloak-configure/templates/rolebinding.yaml
@@ -1,35 +1,3 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kubeapps-admin-group
-  namespace: cozy-dashboard
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kubeapps-admin
-subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: Group
-  name: kubeapps-admin
-
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: kubeapps-admin
-  namespace: cozy-public
-subjects:
-- kind: Group
-  name: kubeapps-admin
-  apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: Role
-  name: kubeapps-admin
-  apiGroup: rbac.authorization.k8s.io
-
----
-
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
diff --git a/packages/system/keycloak-configure/templates/roles.yaml b/packages/system/keycloak-configure/templates/roles.yaml
index ef6ae19c..8b35215e 100644
--- a/packages/system/keycloak-configure/templates/roles.yaml
+++ b/packages/system/keycloak-configure/templates/roles.yaml
@@ -1,45 +1,3 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kubeapps-admin
-rules:
-- apiGroups: [""]
-  resources:
-  - "*"
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups: ["apps.cozystack.io"]
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- apiGroups: ["helm.toolkit.fluxcd.io"]
-  resources:
-  - helmreleases
-  verbs:
-  - '*'
----
-
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: kubeapps-admin
-  namespace: cozy-public
-rules:
-  - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources: ["helmrepositories"]
-    verbs:
-    - get
-    - list
-  - apiGroups: ["source.toolkit.fluxcd.io"]
-    resources:
-    - helmcharts
-    verbs: ["*"]
-
----
-
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata: