improve

FIWARE-Ops · Mar 12, 2024 · e09f19d · e09f19d
1 parent d8a891e
commit e09f19d
Show file tree

Hide file tree

Showing 5 changed files with 35 additions and 26 deletions.
diff --git a/aws/fiware/dome-wallet/wallet-driving/templates/role-binding.yaml b/aws/fiware/dome-wallet/wallet-driving/templates/role-binding.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .Release.Name }}-cs-rb
+  labels:
+    heritage: {{ .Release.Service | quote }}
+    release: {{ .Release.Name | quote }}
+subjects:
+  - kind: ServiceAccount
+    name: wallet-driving-sa
+    namespace: {{ .Release.Namespace | quote }}
+roleRef:
+  kind: Role
+  name: {{ .Release.Name }}-ca-scc-anyuid
+  apiGroup: rbac.authorization.k8s.io
diff --git a/aws/fiware/dome-wallet/wallet-driving/templates/role.yaml b/aws/fiware/dome-wallet/wallet-driving/templates/role.yaml
@@ -1,14 +1,17 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: wallet-driving
+  name: {{ .Release.Name }}-ca-scc-anyuid
+  labels:
+    release: {{ .Release.Name }}
+    heritage: {{ .Release.Service }}
 rules:
-  - apiGroups:
-      - security.openshift.io
-    resourceNames:
-      - anyuid
-      - privileged
-    resources:
-      - securitycontextconstraints
-    verbs:
-      - use
+- apiGroups:
+  - security.openshift.io
+  resourceNames:
+  - anyuid
+  - privileged
+  resources:
+  - securitycontextconstraints
+  verbs:
+  - use
diff --git a/aws/fiware/dome-wallet/wallet-driving/templates/rolebinding.yaml b/aws/fiware/dome-wallet/wallet-driving/templates/rolebinding.yaml
diff --git a/aws/fiware/dome-wallet/wallet-driving/templates/service-account.yaml b/aws/fiware/dome-wallet/wallet-driving/templates/service-account.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: wallet-driving-sa
+  labels:
+    heritage: {{ .Release.Service | quote }}
+    release: {{ .Release.Name | quote }}
diff --git a/aws/fiware/dome-wallet/wallet-driving/templates/serviceAccount.yaml b/aws/fiware/dome-wallet/wallet-driving/templates/serviceAccount.yaml