Grant access common-services Karl & Noah

infrastructure/ldc-custom/ldc-web-equipe-rbac.yaml

@@ -59,15 +59,15 @@ roleRef:
   kind: ClusterRole
   name: view
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-noah-lancien
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-karl-muller
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -76,40 +76,40 @@ metadata:
   creationTimestamp: null
   name: cr-ldc-web-metrics
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - services/portforward
-  - services/proxy
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - traefik.io
-  resources:
-  - ingressroutes
-  - ingressroutetcps
-  - ingressrouteudps
-  - middlewares
-  - middlewaretcps
-  - tlsoptions
-  - tlsstores
-  - traefikservices
-  - serverstransports
-  verbs:
-  - get
-  - list
-  - watch
+  - apiGroups:
+      - ""
+    resources:
+      - services/portforward
+      - services/proxy
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+  - apiGroups:
+      - apiextensions.k8s.io
+    resources:
+      - customresourcedefinitions
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - traefik.io
+    resources:
+      - ingressroutes
+      - ingressroutetcps
+      - ingressrouteudps
+      - middlewares
+      - middlewaretcps
+      - tlsoptions
+      - tlsstores
+      - traefikservices
+      - serverstransports
+    verbs:
+      - get
+      - list
+      - watch
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -121,15 +121,15 @@ roleRef:
   kind: ClusterRole
   name: cr-ldc-web-metrics
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-noah-lancien
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-karl-muller
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -138,12 +138,12 @@ metadata:
   creationTimestamp: null
   name: cr-admin-web-ldc-namespace
 rules:
-- apiGroups:
-  - "*"
-  resources:
-  - "*"
-  verbs:
-  - "*"
+  - apiGroups:
+      - "*"
+    resources:
+      - "*"
+    verbs:
+      - "*"
 
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -152,15 +152,15 @@ metadata:
   name: rb-admin-web-ldc-namespace-review
   namespace: review
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-noah-lancien
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-karl-muller
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: cr-admin-web-ldc-namespace
@@ -173,15 +173,15 @@ metadata:
   name: rb-admin-web-ldc-namespace-staging
   namespace: staging
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-noah-lancien
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-karl-muller
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: cr-admin-web-ldc-namespace
@@ -194,15 +194,15 @@ metadata:
   name: rb-admin-web-ldc-namespace-production
   namespace: production
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-noah-lancien
-  namespace: kube-system
-- kind: ServiceAccount
-  name: svc-karl-muller
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: cr-admin-web-ldc-namespace
@@ -215,9 +215,15 @@ metadata:
   name: rb-admin-web-ldc-namespace-common-services
   namespace: common-services
 subjects:
-- kind: ServiceAccount
-  name: svc-vincent-bridier
-  namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-vincent-bridier
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-noah-lancien
+    namespace: kube-system
+  - kind: ServiceAccount
+    name: svc-karl-muller
+    namespace: kube-system
 roleRef:
   kind: ClusterRole
   name: cr-admin-web-ldc-namespace