diff --git a/k8s/external-account-rbac/kustomization.yaml b/k8s/external-account-rbac/kustomization.yaml index 689f0a9..987a408 100644 --- a/k8s/external-account-rbac/kustomization.yaml +++ b/k8s/external-account-rbac/kustomization.yaml @@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - infra-deployer.yaml + - matrix-bridge-meshtastic-deployer.yaml diff --git a/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml b/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml new file mode 100644 index 0000000..687a99e --- /dev/null +++ b/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml @@ -0,0 +1,22 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: matrix-bridge-meshtastic-deployer + namespace: meshtastic +rules: + - apiGroups: ["apps"] + resources: ["deployments"] + verbs: ["get", "patch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: matrix-bridge-meshtastic-deployer + namespace: meshtastic +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: matrix-bridge-meshtastic-deployer +subjects: +- kind: User + name: matrix-bridge-meshtastic-deployer diff --git a/k8s/forgejo/forgejo-secret-sync.yaml b/k8s/forgejo/forgejo-secret-sync.yaml index 24cae7b..e7951fe 100644 --- a/k8s/forgejo/forgejo-secret-sync.yaml +++ b/k8s/forgejo/forgejo-secret-sync.yaml @@ -19,7 +19,8 @@ spec: - name: REPO_MAPPINGS value: | [ - {"k8s_name": "infra-deployer", "owner": "JankySolutions", "repo": "infra"} + {"k8s_name": "infra-deployer", "owner": "JankySolutions", "repo": "infra"}, + {"k8s_name": "matrix-bridge-meshtastic-deployer", "owner": "finn", "repo": "matrix-bridge-meshtastic"} ] envFrom: - secretRef: