mirror of
https://github.com/holos-run/holos.git
synced 2026-03-21 01:35:02 +00:00
0771bd6b6c
The provisioner cluster is a worker-less autopilot cluster that provides secrets to other clusters in the platform. The `eso-creds-refresher` Job in the holos-system namespace of each other cluster refreshes service account tokens for SecretStores. This patch adds the IAM structure for the Job implemented by Namespace, ServiceAccount, Role, and RoleBinding api objects.
12 lines
208 B
CUE
12 lines
208 B
CUE
package holos
|
|
|
|
#PlatformNamespaces: [
|
|
{name: "holos-system"},
|
|
{name: "flux-system"},
|
|
{name: "ceph-system"},
|
|
{name: "istio-system"},
|
|
{name: "istio-ingress"},
|
|
{name: "cert-manager"},
|
|
{name: "argocd"},
|
|
]
|