diff --git a/apps/base/renovate/kustomization.yaml b/apps/base/renovate/kustomization.yaml index 2a59a6a4219a94c04a2ac2ef045a1c7e9af5d3ba..68348b99c4e5089d68761c1269439cf3dd0de046 100644 --- a/apps/base/renovate/kustomization.yaml +++ b/apps/base/renovate/kustomization.yaml @@ -5,3 +5,6 @@ resources: - namespace.yaml - repository.yaml - release.yaml + +components: + - ../../../shared/components/flux-namespace-admin \ No newline at end of file diff --git a/apps/base/renovate/namespace.yaml b/apps/base/renovate/namespace.yaml index 0adc8bab8962d7499aeb15e4ce6e3c6707b38e42..572a3f4db5f3db9c6e94c801f70b4660c2ac0956 100644 --- a/apps/base/renovate/namespace.yaml +++ b/apps/base/renovate/namespace.yaml @@ -9,23 +9,3 @@ metadata: pod-security.kubernetes.io/audit-version: v1.26 pod-security.kubernetes.io/enforce-version: v1.23 pod-security.kubernetes.io/warn-version: v1.26 ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: flux-reconciler - namespace: renovate ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: flux-reconciler - namespace: renovate -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: admin -subjects: - - kind: ServiceAccount - name: flux-reconciler - namespace: renovate diff --git a/shared/components/flux-namespace-admin/kustomization.yaml b/shared/components/flux-namespace-admin/kustomization.yaml new file mode 100644 index 0000000000000000000000000000000000000000..8fcddec13fbf5b8530a914cc2b92deba5066ea2e --- /dev/null +++ b/shared/components/flux-namespace-admin/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component + +resources: + - serviceaccount.yaml + - rolebinding.yaml \ No newline at end of file diff --git a/shared/components/flux-namespace-admin/rolebinding.yaml b/shared/components/flux-namespace-admin/rolebinding.yaml new file mode 100644 index 0000000000000000000000000000000000000000..978cdf480523d5b89c0f0dabd5b3a4ba41593fba --- /dev/null +++ b/shared/components/flux-namespace-admin/rolebinding.yaml @@ -0,0 +1,12 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: flux-reconciler +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: admin +subjects: + - kind: ServiceAccount + name: flux-reconciler \ No newline at end of file diff --git a/shared/components/flux-namespace-admin/serviceaccount.yaml b/shared/components/flux-namespace-admin/serviceaccount.yaml new file mode 100644 index 0000000000000000000000000000000000000000..eec7c282c2a999d2dd08a401e399316f73d128f9 --- /dev/null +++ b/shared/components/flux-namespace-admin/serviceaccount.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: flux-reconciler +automountServiceAccountToken: false \ No newline at end of file