GPX-712 [Betrieb] Vorbereitungsarbeiten techn. Betrieb MEGA

fix permission problem with group to role mapping Signed-off-by: fhochleitner <felix.hochleitner@outlook.com>
gepaplexx · Aug 3, 2023 · 6e0cea0 · 6e0cea0
1 parent f504c0d
commit 6e0cea0
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 1 deletion.
diff --git a/infra/gp-kyverno/Chart.yaml b/infra/gp-kyverno/Chart.yaml
@@ -3,7 +3,7 @@ name: gp-kyverno
 description: A Helm chart for deploying kyverno on gepaplexx openshift clusters
 
 type: application
-version: 1.0.6
+version: 1.0.7
 
 appVersion: "1.9.1"
 dependencies:

diff --git a/infra/gp-kyverno/templates/rbac.yaml b/infra/gp-kyverno/templates/rbac.yaml
@@ -0,0 +1,21 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kyverno-auth-role
+rules:
+  - apiGroups: ["authorization.openshift.io"]
+    resources: ["rolebinidngs"]
+    verbs: ["create", "list", "update", "get", "delete"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: kyverno-auth-rolebinding
+roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
+    name: kyverno-auth-role
+subjects:
+- kind: ServiceAccount
+  name: {{ .Release.Name }}-background-controller
+  namespace: {{ .Release.Namespace }}