Added tbot rbac

giantswarm · Nov 15, 2023 · c2cbaed · c2cbaed
1 parent 58d3349
commit c2cbaed
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 0 deletions.
diff --git a/helm/teleport-operator/templates/tbot-rbac.yaml b/helm/teleport-operator/templates/tbot-rbac.yaml
@@ -0,0 +1,26 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: tbot-secrets-admin
+  namespace: {{ include "resource.default.namespace"  . }}
+  labels:
+    {{ - include "labels.common" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: tbot-secrets-admin
+  namespace: {{ include "resource.default.namespace"  . }}
+  labels:
+    {{ - include "labels.common" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: tbot
+roleRef:
+  kind: Role
+  name:  tbot-secrets-admin
+  apiGroup: rbac.authorization.k8s.io
diff --git a/helm/teleport-operator/templates/tbot-serviceaccount.yaml b/helm/teleport-operator/templates/tbot-serviceaccount.yaml
@@ -0,0 +1,8 @@
+
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tbot
+  namespace: {{ include "resource.default.namespace"  . }}
+  labels:
+    {{ - include "labels.common" . | nindent 4 }}