Merge pull request #2 from commjoen/namespacing

Namespacing

Author: commjoen

build-an-deploy.sh

@@ -16,4 +16,4 @@ wait
 
 #helm upgrade --install mj ./helm/wrongsecrets-ctf-party --set="imagePullPolicy=Never" --set="balancer.repository=local/wrongsecrets-balancer" --set="balancer.tag=$version" --set="progressWatchdog.repository=local/unusued-progress-watchdog" --set="progressWatchdog.tag=$version" --set="wrongsecretsCleanup.repository=local/cleaner" --set="wrongsecretsCleanup.tag=$version"
 helm upgrade --install mj ./helm/wrongsecrets-ctf-party --set="imagePullPolicy=Never" --set="balancer.repository=local/wrongsecrets-balancer" --set="balancer.tag=$version" --set="wrongsecretsCleanup.repository=local/cleaner" --set="wrongsecretsCleanup.tag=$version"
-#helm upgrade --install mj ./helm/wrongsecrets-ctf-party --set="imagePullPolicy=Never" --set="balancer.repository=jeroenwillemsen/wrongsecrets-balancer" --set="balancer.tag=0.1" --set="wrongsecretsCleanup.repository=jeroenwillemsen/wrongsecrets-ctf-cleaner" --set="wrongsecretsCleanup.tag=0.1"
+#helm upgrade --install mj ./helm/wrongsecrets-ctf-party --set="imagePullPolicy=Always" --set="balancer.repository=jeroenwillemsen/wrongsecrets-balancer" --set="balancer.tag=0.1" --set="wrongsecretsCleanup.repository=jeroenwillemsen/wrongsecrets-ctf-cleaner" --set="wrongsecretsCleanup.tag=0.1"

helm/wrongsecrets-ctf-party/templates/wrongsecrets-balancer/role-binding.yaml

@@ -1,14 +1,14 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: wrongsecrets-balancer
-  namespace: {{ .Release.Namespace | quote }}
   labels:
     helm.sh/chart: {{ include "wrongsecrets-ctf-party.chart" . }}
 subjects:
   - kind: ServiceAccount
     name: wrongsecrets-balancer # Name is case sensitive
+    namespace: {{ .Release.Namespace | quote }}
 roleRef:
-  kind: Role
+  kind: ClusterRole
   name: wrongsecrets-balancer
   apiGroup: rbac.authorization.k8s.io

helm/wrongsecrets-ctf-party/templates/wrongsecrets-balancer/role.yaml

@@ -1,17 +1,19 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
+kind: ClusterRole
 metadata:
-  namespace: {{ .Release.Namespace | quote }}
   name: wrongsecrets-balancer
   labels:
     helm.sh/chart: {{ include "wrongsecrets-ctf-party.chart" . }}
 rules:
   - apiGroups: ['apps']
     resources: ['deployments']
-    verbs: ['get', 'create', 'list', 'delete', 'patch']
+    verbs: ['get', 'create', 'list', 'delete', 'patch', 'watch', 'update']
   - apiGroups: [''] # "" indicates the core API group
     resources: ['services']
     verbs: ['get', 'create', 'delete']
   - apiGroups: [''] # "" indicates the core API group
     resources: ['pods']
-    verbs: ['get', 'list', 'delete']
+    verbs: ['create', 'get', 'list', 'delete']
+  - apiGroups: [''] # "" indicates the core API group
+    resources: ['namespaces']
+    verbs: ['get', 'create', 'list', 'delete', 'patch', 'watch', 'update']