diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2019-11-16 12:06:19 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2019-11-16 12:06:19 +0300 |
commit | 409c3cb076e500968ec4c283cb388b56f3e7c9e6 (patch) | |
tree | 643e9b425314ab1f2d936ad194248255ba94d445 /app/services/clusters | |
parent | 2860167b7774c526469be38aa2ccf58530d1bfa2 (diff) |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'app/services/clusters')
-rw-r--r-- | app/services/clusters/kubernetes/create_or_update_service_account_service.rb | 32 | ||||
-rw-r--r-- | app/services/clusters/kubernetes/kubernetes.rb | 2 |
2 files changed, 34 insertions, 0 deletions
diff --git a/app/services/clusters/kubernetes/create_or_update_service_account_service.rb b/app/services/clusters/kubernetes/create_or_update_service_account_service.rb index 8b8ad924b64..d798dcdcfd3 100644 --- a/app/services/clusters/kubernetes/create_or_update_service_account_service.rb +++ b/app/services/clusters/kubernetes/create_or_update_service_account_service.rb @@ -49,6 +49,8 @@ module Clusters create_or_update_knative_serving_role create_or_update_knative_serving_role_binding + create_or_update_crossplane_database_role + create_or_update_crossplane_database_role_binding end private @@ -78,6 +80,14 @@ module Clusters kubeclient.update_role_binding(knative_serving_role_binding_resource) end + def create_or_update_crossplane_database_role + kubeclient.update_role(crossplane_database_role_resource) + end + + def create_or_update_crossplane_database_role_binding + kubeclient.update_role_binding(crossplane_database_role_binding_resource) + end + def service_account_resource Gitlab::Kubernetes::ServiceAccount.new( service_account_name, @@ -134,6 +144,28 @@ module Clusters service_account_name: service_account_name ).generate end + + def crossplane_database_role_resource + Gitlab::Kubernetes::Role.new( + name: Clusters::Kubernetes::GITLAB_CROSSPLANE_DATABASE_ROLE_NAME, + namespace: service_account_namespace, + rules: [{ + apiGroups: %w(database.crossplane.io), + resources: %w(postgresqlinstances), + verbs: %w(get list create watch) + }] + ).generate + end + + def crossplane_database_role_binding_resource + Gitlab::Kubernetes::RoleBinding.new( + name: Clusters::Kubernetes::GITLAB_CROSSPLANE_DATABASE_ROLE_BINDING_NAME, + role_name: Clusters::Kubernetes::GITLAB_CROSSPLANE_DATABASE_ROLE_NAME, + role_kind: :Role, + namespace: service_account_namespace, + service_account_name: service_account_name + ).generate + end end end end diff --git a/app/services/clusters/kubernetes/kubernetes.rb b/app/services/clusters/kubernetes/kubernetes.rb index 7d5d0c2c1d6..d29519999b2 100644 --- a/app/services/clusters/kubernetes/kubernetes.rb +++ b/app/services/clusters/kubernetes/kubernetes.rb @@ -10,5 +10,7 @@ module Clusters PROJECT_CLUSTER_ROLE_NAME = 'edit' GITLAB_KNATIVE_SERVING_ROLE_NAME = 'gitlab-knative-serving-role' GITLAB_KNATIVE_SERVING_ROLE_BINDING_NAME = 'gitlab-knative-serving-rolebinding' + GITLAB_CROSSPLANE_DATABASE_ROLE_NAME = 'gitlab-crossplane-database-role' + GITLAB_CROSSPLANE_DATABASE_ROLE_BINDING_NAME = 'gitlab-crossplane-database-rolebinding' end end |