diff --git a/infrastructure/ldc-custom/ldc-web-equipe-rbac.yaml b/infrastructure/ldc-custom/ldc-web-equipe-rbac.yaml index 7a0ada7..c8676e8 100644 --- a/infrastructure/ldc-custom/ldc-web-equipe-rbac.yaml +++ b/infrastructure/ldc-custom/ldc-web-equipe-rbac.yaml @@ -59,15 +59,15 @@ roleRef: kind: ClusterRole name: view subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system -- kind: ServiceAccount - name: svc-noah-lancien - namespace: kube-system -- kind: ServiceAccount - name: svc-karl-muller - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system --- apiVersion: rbac.authorization.k8s.io/v1 @@ -76,40 +76,40 @@ metadata: creationTimestamp: null name: cr-ldc-web-metrics rules: -- apiGroups: - - "" - resources: - - services/portforward - - services/proxy - verbs: - - create - - delete - - get - - list -- apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - get - - list - - watch -- apiGroups: - - traefik.io - resources: - - ingressroutes - - ingressroutetcps - - ingressrouteudps - - middlewares - - middlewaretcps - - tlsoptions - - tlsstores - - traefikservices - - serverstransports - verbs: - - get - - list - - watch + - apiGroups: + - "" + resources: + - services/portforward + - services/proxy + verbs: + - create + - delete + - get + - list + - apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions + verbs: + - get + - list + - watch + - apiGroups: + - traefik.io + resources: + - ingressroutes + - ingressroutetcps + - ingressrouteudps + - middlewares + - middlewaretcps + - tlsoptions + - tlsstores + - traefikservices + - serverstransports + verbs: + - get + - list + - watch --- apiVersion: rbac.authorization.k8s.io/v1 @@ -121,15 +121,15 @@ roleRef: kind: ClusterRole name: cr-ldc-web-metrics subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system -- kind: ServiceAccount - name: svc-noah-lancien - namespace: kube-system -- kind: ServiceAccount - name: svc-karl-muller - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system --- apiVersion: rbac.authorization.k8s.io/v1 @@ -138,12 +138,12 @@ metadata: creationTimestamp: null name: cr-admin-web-ldc-namespace rules: -- apiGroups: - - "*" - resources: - - "*" - verbs: - - "*" + - apiGroups: + - "*" + resources: + - "*" + verbs: + - "*" --- apiVersion: rbac.authorization.k8s.io/v1 @@ -152,15 +152,15 @@ metadata: name: rb-admin-web-ldc-namespace-review namespace: review subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system -- kind: ServiceAccount - name: svc-noah-lancien - namespace: kube-system -- kind: ServiceAccount - name: svc-karl-muller - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system roleRef: kind: ClusterRole name: cr-admin-web-ldc-namespace @@ -173,15 +173,15 @@ metadata: name: rb-admin-web-ldc-namespace-staging namespace: staging subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system -- kind: ServiceAccount - name: svc-noah-lancien - namespace: kube-system -- kind: ServiceAccount - name: svc-karl-muller - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system roleRef: kind: ClusterRole name: cr-admin-web-ldc-namespace @@ -194,15 +194,15 @@ metadata: name: rb-admin-web-ldc-namespace-production namespace: production subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system -- kind: ServiceAccount - name: svc-noah-lancien - namespace: kube-system -- kind: ServiceAccount - name: svc-karl-muller - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system roleRef: kind: ClusterRole name: cr-admin-web-ldc-namespace @@ -215,9 +215,15 @@ metadata: name: rb-admin-web-ldc-namespace-common-services namespace: common-services subjects: -- kind: ServiceAccount - name: svc-vincent-bridier - namespace: kube-system + - kind: ServiceAccount + name: svc-vincent-bridier + namespace: kube-system + - kind: ServiceAccount + name: svc-noah-lancien + namespace: kube-system + - kind: ServiceAccount + name: svc-karl-muller + namespace: kube-system roleRef: kind: ClusterRole name: cr-admin-web-ldc-namespace