Merge pull request openshift#12874 from darkmuggle/pr/rhcos

Add RHCOS groups and roles for building RHCOS
vpickard · Oct 20, 2020 · cc39d3c · cc39d3c
2 parents 049b2ce + 3644827
commit cc39d3c
Showing 1 changed file with 66 additions and 1 deletion.
diff --git a/core-services/various_rbac/admin_user_roles.yaml b/core-services/various_rbac/admin_user_roles.yaml
@@ -123,6 +123,20 @@ items:
   - jlebon
   - peterbaouoft
   - smarterclayton
+- kind: Group
+  apiVersion: v1
+  metadata:
+    name: rhcos-admins
+  users:
+  - ashcrow
+  - bh7cw
+  - cgwalters
+  - dustymabe
+  - darkmuggle
+  - jlebon
+  - miabbott
+  - mike-nguyen
+  - ravanelli
 - kind: Group
   apiVersion: v1
   metadata:
@@ -235,7 +249,6 @@ items:
     kind: ClusterRole
     apiGroup: rbac.authorization.k8s.io
     name: system:image-puller
-
 - kind: RoleBinding
   apiVersion: rbac.authorization.k8s.io/v1beta1
   metadata:
@@ -875,3 +888,55 @@ items:
     kind: ClusterRole
     apiGroup: rbac.authorization.k8s.io
     name: system:image-puller
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1beta1
+  metadata:
+    name: rhcos-buildconfig-dev
+    namespace: rhcos-devel
+  subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: system:rhcos-admins
+  roleRef:
+    kind: ClusterRole
+    apiGroup: rbac.authorization.k8s.io
+    name: system:build-strategy-custom
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1beta1
+  metadata:
+    name: rhcos-devel-buildconfig-dev
+    namespace: rhcos-devel
+  subjects:
+  - kind: Group
+    apiGroup: rbac.authorization.k8s.io
+    name: system:rhcos-admins
+  roleRef:
+    kind: ClusterRole
+    apiGroup: rbac.authorization.k8s.io
+    name: system:build-strategy-custom
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1beta1
+  metadata:
+    name: rhcos-admins
+    namespace: rhcos
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
+    name: admin
+  subjects:
+    - apiGroup: rbac.authorization.k8s.io
+      kind: Group
+      name: rhcos-admins
+- kind: RoleBinding
+  apiVersion: rbac.authorization.k8s.io/v1beta1
+  metadata:
+    name: rhcos-devel-admins
+    namespace: rhcos-devel
+  roleRef:
+    apiGroup: rbac.authorization.k8s.io
+    kind: ClusterRole
+    name: admin
+  subjects:
+    - apiGroup: rbac.authorization.k8s.io
+      kind: Group
+      name: rhcos-admins