Skip to content

Commit 64e79cc

Browse files
committed
add RoleBinding for subtenants
1 parent e79479d commit 64e79cc

1 file changed

Lines changed: 14 additions & 4 deletions

File tree

‎packages/apps/tenant/templates/tenant.yaml‎

Lines changed: 14 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -410,15 +410,25 @@ roleRef:
410410
name: {{ include "tenant.name" . }}-super-admin
411411
apiGroup: rbac.authorization.k8s.io
412412
---
413-
kind: RoleBinding
414413
apiVersion: rbac.authorization.k8s.io/v1
414+
kind: RoleBinding
415415
metadata:
416416
name: {{ include "tenant.name" . }}-super-admin
417417
namespace: {{ include "tenant.name" . }}
418418
subjects:
419-
- kind: Group
420-
name: {{ include "tenant.name" . }}-super-admin
421-
apiGroup: rbac.authorization.k8s.io
419+
{{- if hasPrefix "tenant-" .Release.Namespace }}
420+
{{- $parts := splitList "-" .Release.Namespace }}
421+
{{- range $i, $v := $parts }}
422+
{{- if ne $i 0 }}
423+
- kind: Group
424+
name: {{ include "tenant.name" . }}-super-admin
425+
apiGroup: rbac.authorization.k8s.io
426+
{{- end }}
427+
{{- end }}
428+
{{- end }}
429+
- kind: ServiceAccount
430+
name: {{ include "tenant.name" . }}
431+
namespace: {{ include "tenant.name" . }}
422432
roleRef:
423433
kind: Role
424434
name: {{ include "tenant.name" . }}-super-admin

0 commit comments

Comments
 (0)