Grant cluster-logging-application-view to organizations

This is required now that we've migrated APPUiO to LokiStack
appuio · Jan 20, 2025 · 411a0cf · 411a0cf
1 parent 5ddc5c5
commit 411a0cf
Show file tree

Hide file tree

Showing 4 changed files with 19 additions and 1 deletion.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -72,6 +72,7 @@ parameters:
           alert-routing-edit: alert-routing-edit
           monitoring-edit-probe: monitoring-edit-probe
           resource-quota-edit: resource-quota-edit
+          cluster-logging-application-view: cluster-logging-application-view
 
         LegacyNamespaceQuota: ${appuio_cloud:maxNamespaceQuota}
 

diff --git a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_config_map.yaml b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_config_map.yaml
@@ -21,6 +21,7 @@ data:
     "DefaultOrganizationClusterRoles":
       "admin": "admin"
       "alert-routing-edit": "alert-routing-edit"
+      "cluster-logging-application-view": "cluster-logging-application-view"
       "monitoring-edit": "monitoring-edit"
       "monitoring-edit-probe": "monitoring-edit-probe"
       "namespace-owner": "namespace-owner"

diff --git a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_default_org_role_binding.yaml b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/01_default_org_role_binding.yaml
@@ -32,6 +32,22 @@ subjects:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
+metadata:
+  annotations: {}
+  labels:
+    name: appuio-cloud-agent-cluster-logging-application-view
+  name: appuio-cloud-agent:cluster-logging-application-view
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-logging-application-view
+subjects:
+  - kind: ServiceAccount
+    name: appuio-cloud-agent
+    namespace: appuio-cloud
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
 metadata:
   annotations: {}
   labels:

diff --git a/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml b/tests/golden/defaults/appuio-cloud/appuio-cloud/01_agent/02_deployment.yaml
@@ -13,7 +13,7 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: 23ac239163c7dcc887ded3396424bde6
+        checksum/config: e54a385a1e2f485fb551eff97db717a3
         kubectl.kubernetes.io/default-container: agent
       labels:
         control-plane: appuio-cloud-agent