cluster

commit e449615ab9e4b0ea72c6c7f3d0294a94eae74d70
parent 2aba8bc36f1163861c8569edfdbb25f6fe15e896
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 21 Dec 2024 00:19:45 +0100

Deploy gerrit

Diffstat:
M
apps/base/gerrit/gerrit_cluster.yaml
 | 
1
+
A
apps/base/gerrit/ha_rbac.yaml
 | 
28
++++++++++++++++++++++++++++
M
apps/base/gerrit/kustomization.yaml
 | 
1
+

3 files changed, 30 insertions(+), 0 deletions(-)
diff --git a/apps/base/gerrit/gerrit_cluster.yaml b/apps/base/gerrit/gerrit_cluster.yaml
@@ -43,6 +43,7 @@ spec:
                   app: gerrit
           spec:
               mode: PRIMARY
+              serviceAccount: gerrit
               replicas: 1
               resources:
                   requests:
diff --git a/apps/base/gerrit/ha_rbac.yaml b/apps/base/gerrit/ha_rbac.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+    name: gerrit
+    namespace: gerrit
+---
+kind: ClusterRole
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+    name: gerrit
+rules:
+    - apiGroups: [""]
+      resources: ["pods"]
+      verbs: ["get", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+    name: gerrit
+roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
+    name: gerrit
+subjects:
+    - kind: ServiceAccount
+      name: gerrit
+      namespace: gerrit
diff --git a/apps/base/gerrit/kustomization.yaml b/apps/base/gerrit/kustomization.yaml
@@ -6,6 +6,7 @@ resources:
     - release.yaml
     - rbac.yaml
     - cert.yaml
+    - ha_rbac.yaml
     - gerrit_cluster.yaml
     - ingress.yaml
     - zookeeper.yaml