updated all rolebindings to use the clusterrole admin

AccessibleAI · Mar 5, 2024 · f983419 · f983419
1 parent 68da2b8
commit f983419
Show file tree

Hide file tree

Showing 16 changed files with 45 additions and 45 deletions.
diff --git a/pkg/app/controlplane/tmpl/ccp/mgr-rb.tpl b/pkg/app/controlplane/tmpl/ccp/mgr-rb.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-ccp-operator-manager-role
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
     name: cnvrg-ccp-operator-controller-manager
diff --git a/pkg/app/controlplane/tmpl/conf/rbac/buildimage-job-rolebinding.tpl b/pkg/app/controlplane/tmpl/conf/rbac/buildimage-job-rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-buildimage-job
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: cnvrg-buildimage-job
+    name: cnvrg-buildimage-job
diff --git a/pkg/app/controlplane/tmpl/conf/rbac/ccp-rolebinding.tpl b/pkg/app/controlplane/tmpl/conf/rbac/ccp-rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-control-plane
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: cnvrg-control-plane
+    name: cnvrg-control-plane
diff --git a/pkg/app/controlplane/tmpl/conf/rbac/job-rolebinding.tpl b/pkg/app/controlplane/tmpl/conf/rbac/job-rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-job
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: cnvrg-job
+    name: cnvrg-job
diff --git a/pkg/app/controlplane/tmpl/conf/rbac/privileged-job-rolebinding.tpl b/pkg/app/controlplane/tmpl/conf/rbac/privileged-job-rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-privileged-job
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: cnvrg-spark-job
+    name: cnvrg-spark-job
diff --git a/pkg/app/controlplane/tmpl/nomex/rolebinding.tpl b/pkg/app/controlplane/tmpl/nomex/rolebinding.tpl
@@ -9,8 +9,8 @@ metadata:
     mlops.cnvrg.io/updatable: "false"
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: "cnvrg-nomex"
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: cnvrg-nomex
+    name: cnvrg-nomex
diff --git a/pkg/app/dbs/tmpl/es/elastalert/rolebinding.tpl b/pkg/app/dbs/tmpl/es/elastalert/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Es.Elastalert.SvcName }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Es.Elastalert.SvcName }}
+    name: {{ .Spec.Dbs.Es.Elastalert.SvcName }}
diff --git a/pkg/app/dbs/tmpl/es/elastic/rolebinding.tpl b/pkg/app/dbs/tmpl/es/elastic/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Es.SvcName }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Es.ServiceAccount }}
+    name: {{ .Spec.Dbs.Es.ServiceAccount }}
diff --git a/pkg/app/dbs/tmpl/es/kibana/rolebinding.tpl b/pkg/app/dbs/tmpl/es/kibana/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Es.Kibana.SvcName }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Es.Kibana.SvcName }}
+    name: {{ .Spec.Dbs.Es.Kibana.SvcName }}
diff --git a/pkg/app/dbs/tmpl/minio/rolebinding.tpl b/pkg/app/dbs/tmpl/minio/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Minio.ServiceAccount }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Minio.ServiceAccount }}
+    name: {{ .Spec.Dbs.Minio.ServiceAccount }}
diff --git a/pkg/app/dbs/tmpl/pg/rolebinding.tpl b/pkg/app/dbs/tmpl/pg/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Pg.ServiceAccount }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Pg.ServiceAccount }}
+    name: {{ .Spec.Dbs.Pg.ServiceAccount }}
diff --git a/pkg/app/dbs/tmpl/prom/grafana/rolebinding.tpl b/pkg/app/dbs/tmpl/prom/grafana/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Prom.Grafana.SvcName }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Prom.Grafana.SvcName }}
+    name: {{ .Spec.Dbs.Prom.Grafana.SvcName }}
diff --git a/pkg/app/dbs/tmpl/prom/prometheus/rolebinding.tpl b/pkg/app/dbs/tmpl/prom/prometheus/rolebinding.tpl
@@ -16,9 +16,9 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: cnvrg-prom
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
     name: cnvrg-prom
-    namespace: {{ .CnvrgNamespace }}
+    namespace: {{ .CnvrgNamespace }}
diff --git a/pkg/app/dbs/tmpl/redis/rolebinding.tpl b/pkg/app/dbs/tmpl/redis/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.Dbs.Redis.ServiceAccount }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
-    name: {{ .Spec.Dbs.Redis.ServiceAccount }}
+    name: {{ .Spec.Dbs.Redis.ServiceAccount }}
diff --git a/pkg/app/sso/tmpl/jwks/rolebinding.tpl b/pkg/app/sso/tmpl/jwks/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ .Spec.SSO.Jwks.SvcName }}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
     name: {{ .Spec.SSO.Jwks.SvcName }}
diff --git a/pkg/app/sso/tmpl/proxy/rolebinding.tpl b/pkg/app/sso/tmpl/proxy/rolebinding.tpl
@@ -16,8 +16,8 @@ metadata:
     {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{.Spec.SSO.Proxy.SvcName}}
+  kind: ClusterRole
+  name: admin
 subjects:
   - kind: ServiceAccount
     name: {{.Spec.SSO.Proxy.SvcName}}