bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

maintenance(soteria): roll pvc-node pin fix and pod-read rbac

Browse Source
This commit is contained in:
Brad Stein 2026-04-13 03:32:25 -03:00
parent a23b6a4b93
commit b3d8b13f39
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/maintenance/kustomization.yaml
View File

@ -51,7 +51,7 @@ images:
- name: registry.bstein.dev/bstein/metis - name: registry.bstein.dev/bstein/metis
newTag: 0.1.0-9-amd64 newTag: 0.1.0-9-amd64
- name: registry.bstein.dev/bstein/soteria - name: registry.bstein.dev/bstein/soteria
newTag: 0.1.0-27 # {"$imagepolicy": "maintenance:soteria:tag"} newTag: 0.1.0-29 # {"$imagepolicy": "maintenance:soteria:tag"}
configMapGenerator: configMapGenerator:
- name: disable-k3s-traefik-script - name: disable-k3s-traefik-script
namespace: maintenance namespace: maintenance

4
services/maintenance/soteria-rbac.yaml
View File

@ -7,6 +7,9 @@ rules:
- apiGroups: [""] - apiGroups: [""]
resources: ["persistentvolumeclaims", "persistentvolumes"] resources: ["persistentvolumeclaims", "persistentvolumes"]
verbs: ["get", "list"] verbs: ["get", "list"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["get", "list"]
- apiGroups: [""] - apiGroups: [""]
resources: ["secrets"] resources: ["secrets"]
verbs: ["get", "list", "create", "update", "delete"] verbs: ["get", "list", "create", "update", "delete"]
@ -26,4 +29,3 @@ subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: soteria name: soteria
namespace: maintenance namespace: maintenance