Add clusterroles rbac to obs cluster and clean-up

- affects obs-cluster - add clusterroles rbac - streamline: remove redundant github-client-secret.yaml (follow OCP-on-NERC#316) - adjust kustomization.yaml to that - cleanup: remove oauths-clientsecret-nerc, keycloak.mss not needed (yet) -adjust rook-ceph-external-cluster to fit to match changes in OCP-on-NERC#348 fixes nerc-project/operations#308 Signed-off-by: /Thor(sten)?/ Schwesig <[email protected]>
schwesig · Jan 26, 2024 · 90ab74d · 90ab74d
1 parent b0b8a2e
commit 90ab74d
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 42 deletions.
diff --git a/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/github-client-secret.yaml b/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/github-client-secret.yaml
diff --git a/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/rook-ceph-external-cluster-details.yaml b/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/rook-ceph-external-cluster-details.yaml
diff --git a/cluster-scope/overlays/nerc-ocp-obs/kustomization.yaml b/cluster-scope/overlays/nerc-ocp-obs/kustomization.yaml
@@ -7,7 +7,9 @@ resources:
 - ../common
 - ../../bundles/node-feature-discovery
 - ../../base/core/namespaces/openshift-gitops
+- ../../base/rbac.authorization.k8s.io/clusterroles/allow-edit-rbac
 - clusterversion.yaml
+- externalsecrets
 - secretstores
 - logs-storage
 - logsarchive-storage
@@ -56,13 +58,6 @@ patches:
             - ocp-on-nerc/nerc-ops
             - ocp-on-nerc/nerc-logs-metrics
             - ocp-on-nerc/nerc-obs-admins
-- target:
-    kind: ExternalSecret
-    name: oauths-clientsecret-nerc
-  patch: |
-    - op: replace
-      path: /spec/data/0/remoteRef/key
-      value: nerc/nerc-ocp-obs/openshift-config/oauths-clientsecret-nerc
 - target:
     kind: ExternalSecret
     name: aws-route53-credentials