Add clusterroles rbac to obs cluster and clean-up

- affects obs-cluster - add clusterroles rbac - streamline: remove redundant github-client-secret.yaml (follow OCP-on-NERC#316) - adjust kustomization.yaml to that - cleanup: remove oauths-clientsecret-nerc, keycloak.mss not needed (yet) fixes nerc-project/operations#308 Signed-off-by: /Thor(sten)?/ Schwesig <[email protected]>
schwesig · Jan 26, 2024 · c323f36 · c323f36
1 parent 2490c01
commit c323f36
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 26 deletions.
diff --git a/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/github-client-secret.yaml b/cluster-scope/overlays/nerc-ocp-obs/externalsecrets/github-client-secret.yaml
diff --git a/cluster-scope/overlays/nerc-ocp-obs/kustomization.yaml b/cluster-scope/overlays/nerc-ocp-obs/kustomization.yaml
@@ -7,7 +7,9 @@ resources:
 - ../common
 - ../../bundles/node-feature-discovery
 - ../../base/core/namespaces/openshift-gitops
+- ../../base/rbac.authorization.k8s.io/clusterroles/allow-edit-rbac
 - clusterversion.yaml
+- externalsecrets
 - secretstores
 
 components:
@@ -53,13 +55,6 @@ patches:
             - ocp-on-nerc/nerc-ops
             - ocp-on-nerc/nerc-logs-metrics
             - ocp-on-nerc/nerc-obs-admins
-- target:
-    kind: ExternalSecret
-    name: oauths-clientsecret-nerc
-  patch: |
-    - op: replace
-      path: /spec/data/0/remoteRef/key
-      value: nerc/nerc-ocp-obs/openshift-config/oauths-clientsecret-nerc
 - target:
     kind: ExternalSecret
     name: aws-route53-credentials