Merge pull request #267 from ClubCedille/kubewall-test

remove ingress and add service account

apps/kubewall/base/kustomization.yaml

@@ -3,4 +3,6 @@ kind: Kustomization
 
 resources:
   - deployment.yaml
-  - network.yaml
+  - network.yaml
+  - permissions.yaml
+  - permissionsBinding.yaml

apps/kubewall/base/permissions.yaml

@@ -1,8 +1,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
+kind: ServiceAccount
 metadata:
-  name: cluster-deployment
-rules:
-  - apiGroups: ["apps"]
-    resources: ["*"]
-    verbs: ["get", "list", "watch"]
+  name: kubewall-admin
+  namespace: kubewall
+  labels:
+    name: kubewall-admin

apps/kubewall/base/permissionsBinding.yaml

@@ -1,12 +1,12 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: kubewall-cluster-deployment
-subjects:
-  - kind: ServiceAccount
-    name: default
-    namespace: kubewall
+  name: kubewall-cluster-admin
 roleRef:
+  apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: cluster-deployment
-  apiGroup: rbac.authorization.k8s.io
+  name: cluster-admin
+roleRef:
+  kind: ServiceAccount
+  name: kubewall-admin
+  namespace: kubewall

apps/kubewall/prod/kustomization.yaml

@@ -3,4 +3,4 @@ kind: Kustomization
 
 resources:
   - ../base/
-  - ingress.yaml
+  # - ingress.yaml