From 0163a18f4de48c4dd279e83469f86af6d5a9281e Mon Sep 17 00:00:00 2001
From: Finn <finn@finn.io>
Date: Wed, 30 Oct 2024 14:57:19 -0700
Subject: [PATCH] Add matrix-bridge-meshtastic deployer

---
 k8s/external-account-rbac/kustomization.yaml  |  1 +
 .../matrix-bridge-meshtastic-deployer.yaml    | 22 +++++++++++++++++++
 k8s/forgejo/forgejo-secret-sync.yaml          |  3 ++-
 3 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml

diff --git a/k8s/external-account-rbac/kustomization.yaml b/k8s/external-account-rbac/kustomization.yaml
index 689f0a9..987a408 100644
--- a/k8s/external-account-rbac/kustomization.yaml
+++ b/k8s/external-account-rbac/kustomization.yaml
@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - infra-deployer.yaml
+  - matrix-bridge-meshtastic-deployer.yaml
diff --git a/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml b/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml
new file mode 100644
index 0000000..687a99e
--- /dev/null
+++ b/k8s/external-account-rbac/matrix-bridge-meshtastic-deployer.yaml
@@ -0,0 +1,22 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: matrix-bridge-meshtastic-deployer
+  namespace: meshtastic
+rules:
+  - apiGroups: ["apps"]
+    resources: ["deployments"]
+    verbs: ["get", "patch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: matrix-bridge-meshtastic-deployer
+  namespace: meshtastic
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: matrix-bridge-meshtastic-deployer
+subjects:
+- kind: User
+  name: matrix-bridge-meshtastic-deployer
diff --git a/k8s/forgejo/forgejo-secret-sync.yaml b/k8s/forgejo/forgejo-secret-sync.yaml
index 24cae7b..e7951fe 100644
--- a/k8s/forgejo/forgejo-secret-sync.yaml
+++ b/k8s/forgejo/forgejo-secret-sync.yaml
@@ -19,7 +19,8 @@ spec:
                 - name: REPO_MAPPINGS
                   value: |
                     [
-                      {"k8s_name": "infra-deployer", "owner": "JankySolutions", "repo": "infra"}
+                      {"k8s_name": "infra-deployer", "owner": "JankySolutions", "repo": "infra"},
+                      {"k8s_name": "matrix-bridge-meshtastic-deployer", "owner": "finn", "repo": "matrix-bridge-meshtastic"}
                     ]
               envFrom:
                 - secretRef: