cluster

commit a36a65d138a1763f1326f479ac91f481966280d4
parent 3fb9f336bb28908bf0842d947132805149078685
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri, 20 Dec 2024 01:28:49 +0100

Deploy gerrit

Diffstat:
M
apps/base/gerrit/kustomization.yaml
 | 
1
+
A
apps/base/gerrit/rbac.yaml
 | 
78
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
M
apps/base/gerrit/repository.yaml
 | 
2
++

3 files changed, 81 insertions(+), 0 deletions(-)
diff --git a/apps/base/gerrit/kustomization.yaml b/apps/base/gerrit/kustomization.yaml
@@ -4,3 +4,4 @@ namespace: gerrit
 resources:
     - repository.yaml
     - release.yaml
+    - rbac.yaml
diff --git a/apps/base/gerrit/rbac.yaml b/apps/base/gerrit/rbac.yaml
@@ -0,0 +1,78 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+    name: gerrit-operator
+    namespace: gerrit
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+    name: gerrit-operator-admin
+subjects:
+    - kind: ServiceAccount
+      name: gerrit-operator
+      namespace: gerrit
+roleRef:
+    kind: ClusterRole
+    name: gerrit-operator
+    apiGroup: ""
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+    name: gerrit-operator
+rules:
+    - apiGroups:
+          - "batch"
+      resources:
+          - cronjobs
+          - jobs
+      verbs:
+          - "*"
+    - apiGroups:
+          - "apps"
+      resources:
+          - statefulsets
+          - deployments
+      verbs:
+          - "*"
+    - apiGroups:
+          - ""
+      resources:
+          - configmaps
+          - persistentvolumeclaims
+          - secrets
+          - services
+      verbs:
+          - "*"
+    - apiGroups:
+          - "storage.k8s.io"
+      resources:
+          - storageclasses
+      verbs:
+          - "get"
+          - "list"
+    - apiGroups:
+          - "apiextensions.k8s.io"
+      resources:
+          - customresourcedefinitions
+      verbs:
+          - "*"
+    - apiGroups:
+          - "gerritoperator.google.com"
+      resources:
+          - "*"
+      verbs:
+          - "*"
+    - apiGroups:
+          - "admissionregistration.k8s.io"
+      resources:
+          - "validatingwebhookconfigurations"
+      verbs:
+          - "*"
+    - apiGroups:
+          - "networking.k8s.io"
+      resources:
+          - ingresses
+      verbs:
+          - "*"
diff --git a/apps/base/gerrit/repository.yaml b/apps/base/gerrit/repository.yaml
@@ -8,3 +8,5 @@ spec:
     url: https://gerrit.googlesource.com/k8s-gerrit
     ref:
         branch: master
+    ignore: |
+        /helm-charts/gerrit-operator/templates/rbac.yam