Improve in-namespace admin powerz

geek-cookbook · Dec 19, 2020 · 9678718 · 9678718
1 parent 6655290
commit 9678718
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 2 deletions.
diff --git a/charts/fission-all/Chart.yaml b/charts/fission-all/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: fission-all
-version: 1.8.1-pre29
+version: 1.8.1-pre30
 description: Fission is a fast serverless framework for Kubernetes.
 keywords:
 - fission

diff --git a/charts/fission-all/templates/rbac/namespace-isolation.yaml b/charts/fission-all/templates/rbac/namespace-isolation.yaml
@@ -12,7 +12,7 @@ rules:
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: fission-namespace-admin
+  name: fission-namespace-k8s-admin
   namespace: {{ .Release.Namespace }}
 subjects:
 - kind: ServiceAccount
@@ -22,6 +22,19 @@ roleRef:
   name: admin
   apiGroup: rbac.authorization.k8s.io
 ---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: fission-namespace-admin
+  namespace: {{ .Release.Namespace }}
+subjects:
+- kind: ServiceAccount
+  name: fission-svc
+roleRef:
+  kind: Role
+  name: fission-namespace-admin
+  apiGroup: rbac.authorization.k8s.io  
+---
 # The fission controller needs to look at the CRDs
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1beta1