diff --git a/namespaces/team-c.yaml b/namespaces/team-c.yaml new file mode 100644 index 0000000..990a597 --- /dev/null +++ b/namespaces/team-c.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + labels: + name: team-c + annotations: + contoso.com/owner: "team-c@contoso.com" + name: team-c diff --git a/rbac/team-c.yaml b/rbac/team-c.yaml new file mode 100644 index 0000000..ba87e1c --- /dev/null +++ b/rbac/team-c.yaml @@ -0,0 +1,30 @@ +--- +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: team-c-app-dev + namespace: development +rules: + - apiGroups: ["", "extensions", "apps"] + resources: ["*"] + verbs: ["*"] + - apiGroups: ["batch"] + resources: ["jobs", "cronjobs"] + verbs: ["*"] + - apiGroups: ["autoscaling"] + resources: ["*"] + verbs: ["*"] +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: team-c-app-dev + namespace: team-c +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: team-c-app-dev +subjects: + - apiGroup: rbac.authorization.k8s.io + kind: Group + name: ec685b73-9f21-40e5-8ad5-c13eba4caa09