gitops: add rbac kustomization + store some forgotten older changes in

repo
2026-03-01 14:33:56 +01:00
parent 0eab64c954
commit 9877b093e8
6 changed files with 41 additions and 1 deletions
--- a/gitops/home-kubernetes/00-rbac/clusterRoleBinding_gitea-ci.yaml
+++ b/gitops/home-kubernetes/00-rbac/clusterRoleBinding_gitea-ci.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitea-ci-deploy
+subjects:
+  - kind: User
+    name: "gitea_ci@idm.home.hrajfrisbee.cz"  # matches preferred_username claim
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: edit  # scope down as needed
+  apiGroup: rbac.authorization.k8s.io