feat: Add RBAC for CNP to read B2 credentials secret
This commit is contained in:
@@ -6,4 +6,5 @@ resources:
|
|||||||
- rancher-db-password-externalsecret.yaml
|
- rancher-db-password-externalsecret.yaml
|
||||||
- postgres-cluster.yaml
|
- postgres-cluster.yaml
|
||||||
- cnpg-cluster-rw-svc.yaml
|
- cnpg-cluster-rw-svc.yaml
|
||||||
|
- rolebinding-b2-reader.yaml
|
||||||
- pgdump-cronjob.yaml
|
- pgdump-cronjob.yaml
|
||||||
13
infrastructure/addons/cnpg/rolebinding-b2-reader.yaml
Normal file
13
infrastructure/addons/cnpg/rolebinding-b2-reader.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: rancher-db-b2-reader
|
||||||
|
namespace: cnpg-cluster
|
||||||
|
subjects:
|
||||||
|
- kind: ServiceAccount
|
||||||
|
name: rancher-db
|
||||||
|
namespace: cnpg-cluster
|
||||||
|
roleRef:
|
||||||
|
kind: Role
|
||||||
|
name: rancher-db-b2-reader
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
Reference in New Issue
Block a user