Add sdtcs for telemeter read in RBAC (#651)

Signed-off-by: Saswata Mukherjee <[email protected]>
rhobs · Nov 16, 2023 · f6b171e · f6b171e
1 parent c29b740
commit f6b171e
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/configuration/observatorium/rbac.go b/configuration/observatorium/rbac.go
@@ -151,6 +151,15 @@ func GenerateRBAC(gen *mimic.Generator) {
 		envs:    []env{stagingEnv, productionEnv},
 	})
 
+	// SD TCS (App-interface progressive delivery feature)
+	attachBinding(&obsRBAC, bindingOpts{
+		name:    "observatorium-sdtcs",
+		tenant:  telemeterTenant,
+		signals: []signal{metricsSignal},
+		perms:   []rbac.Permission{rbac.Read},
+		envs:    []env{stagingEnv, productionEnv},
+	})
+
 	// Subwatch
 	attachBinding(&obsRBAC, bindingOpts{
 		name:    "observatorium-subwatch",

diff --git a/resources/services/observatorium-template.yaml b/resources/services/observatorium-template.yaml
@@ -846,6 +846,14 @@ objects:
           "name": "service-account-observatorium-ccx-processing-staging"
         - "kind": "user"
           "name": "service-account-observatorium-ccx-processing"
+      - "name": "observatorium-sdtcs"
+        "roles":
+        - "telemeter-metrics-read"
+        "subjects":
+        - "kind": "user"
+          "name": "service-account-observatorium-sdtcs-staging"
+        - "kind": "user"
+          "name": "service-account-observatorium-sdtcs"
       - "name": "observatorium-subwatch"
         "roles":
         - "telemeter-metrics-read"