mirror of
https://github.com/holos-run/holos.git
synced 2026-04-05 00:54:57 +00:00
The provisioner cluster is a worker-less autopilot cluster that provides secrets to other clusters in the platform. The `eso-creds-refresher` Job in the holos-system namespace of each other cluster refreshes service account tokens for SecretStores. This patch adds the IAM structure for the Job implemented by Namespace, ServiceAccount, Role, and RoleBinding api objects.