From: naman.gupta Date: Wed, 29 Nov 2023 08:05:14 +0000 (+0530) Subject: Adding Role and Role Binding for Alarm Manager. X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=commitdiff_plain;h=b5fd2329a5481f54fce022eb0dc5929af12121e6;p=ric-plt%2Fric-dep.git Adding Role and Role Binding for Alarm Manager. Adding Role and Role Binding and Service Account for Alarm Manager. Change-Id: I1938bed89cd6427284f75a255f9bb201fa22d52c Signed-off-by: naman.gupta --- diff --git a/depRicKubernetesOperator/internal/controller/getRole.go b/depRicKubernetesOperator/internal/controller/getRole.go new file mode 100644 index 0000000..e43a0ba --- /dev/null +++ b/depRicKubernetesOperator/internal/controller/getRole.go @@ -0,0 +1,39 @@ +package controller + +import ( + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" +) + +func GetRole() []*rbacv1.Role { + + role1 := &rbacv1.Role{ + ObjectMeta: metav1.ObjectMeta{ + Name: "svcacct-ricplt-alarmmanager-ricxapp-podreader", + Namespace: "ricxapp", + }, + Rules: []rbacv1.PolicyRule{ + + rbacv1.PolicyRule{ + APIGroups: []string{ + + "", + }, + Resources: []string{ + + "pods", + }, + Verbs: []string{ + + "get", + "list", + "watch", + }, + }, + }, + TypeMeta: metav1.TypeMeta{ + APIVersion: "rbac.authorization.k8s.io/v1", + Kind: "Role", + }, + } + return []*rbacv1.Role{role1} +} diff --git a/depRicKubernetesOperator/internal/controller/getRoleBinding.go b/depRicKubernetesOperator/internal/controller/getRoleBinding.go new file mode 100644 index 0000000..ca6a093 --- /dev/null +++ b/depRicKubernetesOperator/internal/controller/getRoleBinding.go @@ -0,0 +1,34 @@ +package controller + +import ( + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" +) + +func GetRoleBinding() []*rbacv1.RoleBinding { + + roleBinding1 := &rbacv1.RoleBinding{ + Subjects: []rbacv1.Subject{ + + rbacv1.Subject{ + Kind: "ServiceAccount", + Name: "svcacct-ricplt-alarmmanager", + Namespace: "ricplt", + }, + }, + TypeMeta: metav1.TypeMeta{ + APIVersion: "rbac.authorization.k8s.io/v1", + Kind: "RoleBinding", + }, + ObjectMeta: metav1.ObjectMeta{ + Name: "svcacct-ricplt-alarmmanager-ricxapp-podreader", + Namespace: "ricxapp", + }, + RoleRef: rbacv1.RoleRef{ + APIGroup: "rbac.authorization.k8s.io", + Kind: "Role", + Name: "svcacct-ricplt-alarmmanager-ricxapp-podreader", + }, + } + + return []*rbacv1.RoleBinding{roleBinding1} +} diff --git a/depRicKubernetesOperator/internal/controller/getServiceAccount.go b/depRicKubernetesOperator/internal/controller/getServiceAccount.go new file mode 100644 index 0000000..366405b --- /dev/null +++ b/depRicKubernetesOperator/internal/controller/getServiceAccount.go @@ -0,0 +1,22 @@ +package controller + +import ( + corev1 "k8s.io/api/core/v1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/apimachinery/pkg/util/intstr" +) + +func GetServiceAccount() []*corev1.ServiceAccount { + + serviceAccount1 := &corev1.ServiceAccount{ + ObjectMeta: metav1.ObjectMeta{ + Name: "svcacct-ricplt-alarmmanager", + Namespace: "ricplt", + }, + TypeMeta: metav1.TypeMeta{ + APIVersion: "v1", + Kind: "ServiceAccount", + }, + } + return []*corev1.ServiceAccount{serviceAccount1} +} \ No newline at end of file