Adding Role binding for RIC. 57/12157/2
authornaman.gupta <naman.gupta@samsung.com>
Fri, 1 Dec 2023 18:17:37 +0000 (23:47 +0530)
committerThoralf Czichy <thoralf.czichy@nokia.com>
Thu, 7 Dec 2023 09:36:44 +0000 (09:36 +0000)
Adding Role binding for RIC.

Change-Id: Ic9eac085ceef625ea0c6e430b76c13c37ed43f8f
Signed-off-by: naman.gupta <naman.gupta@samsung.com>
depRicKubernetesOperator/internal/controller/getRoleBinding.go

index ca6a093..1632aec 100644 (file)
@@ -30,5 +30,209 @@ func GetRoleBinding() []*rbacv1.RoleBinding {
                },\r
        }\r
 \r
-       return []*rbacv1.RoleBinding{roleBinding1}\r
+       roleBinding2 := &rbacv1.RoleBinding{\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Labels: map[string]string{\r
+                               "app.kubernetes.io/instance":   "release-name",\r
+                               "app.kubernetes.io/managed-by": "Helm",\r
+                               "app.kubernetes.io/name":       "kong",\r
+                               "app.kubernetes.io/version":    "1.4",\r
+                               "helm.sh/chart":                "kong-0.36.6",\r
+                       },\r
+                       Name:      "release-name-kong",\r
+                       Namespace: "ricplt",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "release-name-kong",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "release-name-kong",\r
+                               Namespace: "ricplt",\r
+                       },\r
+               },\r
+       }\r
+\r
+       roleBinding3 := &rbacv1.RoleBinding{\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Name:      "svcacct-tiller-ricxapp-ricxapp-tiller-base",\r
+                       Namespace: "ricxapp",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "ricxapp-tiller-base",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "svcacct-tiller-ricxapp",\r
+                               Namespace: "ricinfra",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       Kind:       "RoleBinding",\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+               },\r
+       }\r
+\r
+       roleBinding4 := &rbacv1.RoleBinding{\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Namespace: "ricinfra",\r
+                       Name:      "svcacct-tiller-ricxapp-ricxapp-tiller-operation",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "ricxapp-tiller-operation",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "svcacct-tiller-ricxapp",\r
+                               Namespace: "ricinfra",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+       }\r
+\r
+       roleBinding5 := &rbacv1.RoleBinding{\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Namespace: "ricxapp",\r
+                       Name:      "svcacct-tiller-ricxapp-ricxapp-tiller-deployer",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       Kind:     "Role",\r
+                       Name:     "ricxapp-tiller-deployer",\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "svcacct-tiller-ricxapp",\r
+                               Namespace: "ricinfra",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+       }\r
+\r
+       roleBinding6 := &rbacv1.RoleBinding{\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Namespace: "ricinfra",\r
+                       Name:      "tiller-secret-creator-xzhjjg-secret-create",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "tiller-secret-creator-xzhjjg-secret-create",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "tiller-secret-creator-xzhjjg",\r
+                               Namespace: "ricinfra",\r
+                       },\r
+               },\r
+       }\r
+\r
+       roleBinding7 := &rbacv1.RoleBinding{\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Labels: map[string]string{\r
+                               "app.kubernetes.io/instance":   "release-name",\r
+                               "app.kubernetes.io/managed-by": "Helm",\r
+                               "app.kubernetes.io/name":       "kong",\r
+                               "app.kubernetes.io/version":    "1.4",\r
+                               "helm.sh/chart":                "kong-0.36.6",\r
+                       },\r
+                       Name:      "release-name-kong",\r
+                       Namespace: "ricplt",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       Name:     "release-name-kong",\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+               },\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Namespace: "ricplt",\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "release-name-kong",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+       }\r
+\r
+       roleBinding8 := &rbacv1.RoleBinding{\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind:      "ServiceAccount",\r
+                               Name:      "svcacct-ricplt-o1mediator",\r
+                               Namespace: "ricplt",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Name:      "svcacct-ricplt-o1mediator-ricxapp-podreader",\r
+                       Namespace: "ricxapp",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "svcacct-ricplt-o1mediator-ricxapp-podreader",\r
+               },\r
+       }\r
+\r
+       roleBinding9 := &rbacv1.RoleBinding{\r
+               Subjects: []rbacv1.Subject{\r
+\r
+                       rbacv1.Subject{\r
+                               Kind: "ServiceAccount",\r
+                               Name: "assigner-sa",\r
+                       },\r
+               },\r
+               TypeMeta: metav1.TypeMeta{\r
+                       APIVersion: "rbac.authorization.k8s.io/v1",\r
+                       Kind:       "RoleBinding",\r
+               },\r
+               ObjectMeta: metav1.ObjectMeta{\r
+                       Name: "assigner-rb",\r
+               },\r
+               RoleRef: rbacv1.RoleRef{\r
+                       APIGroup: "rbac.authorization.k8s.io",\r
+                       Kind:     "Role",\r
+                       Name:     "assigner-role",\r
+               },\r
+       }\r
+\r
+       return []*rbacv1.RoleBinding{roleBinding1, roleBinding2, roleBinding3, roleBinding4, roleBinding5, roleBinding6, roleBinding7, roleBinding8, roleBinding9}\r
 }\r