extra resources to allow to control cluster

razee-io · May 9, 2019 · 299de7b · 299de7b
1 parent a3291b6
commit 299de7b
Showing 1 changed file with 56 additions and 0 deletions.
diff --git a/kubernetes/kapitan-delta/resource.yaml b/kubernetes/kapitan-delta/resource.yaml
@@ -14,12 +14,68 @@
 # limitations under the License.
 ################################################################################
 apiVersion: v1
+kind: Namespace
+metadata:
+  name: razee
+  annotations:
+    razee.io/git-repo: "{{{GIT_REMOTE}}}"
+    razee.io/commit-sha: "{{TRAVIS_COMMIT}}"
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kapitan-sa
+  namespace: razee
+  annotations:
+    razee.io/git-repo: "{{{GIT_REMOTE}}}"
+    razee.io/commit-sha: "{{TRAVIS_COMMIT}}"
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: cluster-admin
+  namespace: razee
+  annotations:
+    razee.io/git-repo: "{{{GIT_REMOTE}}}"
+    razee.io/commit-sha: "{{TRAVIS_COMMIT}}"
+rules:
+- apiGroups:
+  - '*'
+  resources:
+  - '*'
+  verbs:
+  - '*'
+- nonResourceURLs:
+  - '*'
+  verbs:
+  - '*'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: kapitan-rb
+  annotations:
+    razee.io/git-repo: "{{{GIT_REMOTE}}}"
+    razee.io/commit-sha: "{{TRAVIS_COMMIT}}"
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- kind: ServiceAccount
+  name: kapitan-sa
+  namespace: razee
+---
+apiVersion: v1
 kind: ConfigMap
 data:
   s3download: "https://github.com/razee-io/S3Download/releases/download/0.0.1/resource.yaml"
 metadata:
   name: kapitan-delta-resource-uris
   namespace: razee
+  annotations:
+    razee.io/git-repo: "{{{GIT_REMOTE}}}"
+    razee.io/commit-sha: "{{TRAVIS_COMMIT}}"
 ---
 apiVersion: apps/v1
 kind: Deployment