@@ -4,15 +4,16 @@ apiVersion: v1
44kind : Secret
55metadata :
66 name : mongodb-admin-password
7+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
78type : Opaque
89stringData :
910 password : admin-password
10-
1111---
1212apiVersion : v1
1313kind : Secret
1414metadata :
1515 name : mongodb-rocketchat-password
16+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
1617type : Opaque
1718stringData :
1819 password : rocketchat-password
@@ -22,15 +23,16 @@ apiVersion: v1
2223kind : Secret
2324metadata :
2425 name : metrics-endpoint-password
26+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
2527type : Opaque
2628stringData :
2729 password : metrics-password
28-
2930---
3031apiVersion : v1
3132kind : Secret
3233metadata :
3334 name : admin-scram-credentials
35+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
3436type : Opaque
3537stringData :
3638 username : admin
@@ -41,6 +43,7 @@ apiVersion: v1
4143kind : Secret
4244metadata :
4345 name : rocketchat-scram-credentials
46+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
4447type : Opaque
4548stringData :
4649 username : rocketchat
@@ -50,6 +53,7 @@ apiVersion: mongodbcommunity.mongodb.com/v1
5053kind : MongoDBCommunity
5154metadata :
5255 name : ${DEPLOYMENT_NAME}-mongodb
56+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
5357spec :
5458 members : 1
5559 type : ReplicaSet
@@ -84,4 +88,106 @@ spec:
8488apiVersion : v1
8589kind : ServiceAccount
8690metadata :
87- name : mongodb-kubernetes-appdb
91+ name : " mongodb-kubernetes-appdb"
92+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
93+ ---
94+ apiVersion : rbac.authorization.k8s.io/v1
95+ kind : ClusterRole
96+ metadata :
97+ name : " ${DEPLOYMENT_NAME}-${DETIK_CLIENT_NAMESPACE}-mongodb"
98+ rules :
99+ - apiGroups :
100+ - " "
101+ resources :
102+ - services
103+ verbs :
104+ - get
105+ - list
106+ - watch
107+ - create
108+ - update
109+ - delete
110+ - apiGroups :
111+ - " "
112+ resources :
113+ - secrets
114+ - configmaps
115+ verbs :
116+ - get
117+ - list
118+ - create
119+ - update
120+ - delete
121+ - watch
122+ - apiGroups :
123+ - apps
124+ resources :
125+ - statefulsets
126+ verbs :
127+ - create
128+ - get
129+ - list
130+ - watch
131+ - delete
132+ - update
133+ - apiGroups :
134+ - " "
135+ resources :
136+ - pods
137+ verbs :
138+ - get
139+ - list
140+ - watch
141+ - delete
142+ - update
143+ - patch
144+ - deletecollection
145+ - apiGroups :
146+ - mongodbcommunity.mongodb.com
147+ resources :
148+ - mongodbcommunity
149+ - mongodbcommunity/status
150+ - mongodbcommunity/spec
151+ - mongodbcommunity/finalizers
152+ verbs :
153+ - ' *'
154+ - apiGroups :
155+ - mongodb.com
156+ resources :
157+ - mongodb
158+ - mongodb/finalizers
159+ - mongodbusers
160+ - mongodbusers/finalizers
161+ - opsmanagers
162+ - opsmanagers/finalizers
163+ - mongodbmulticluster
164+ - mongodbmulticluster/finalizers
165+ - mongodbsearch
166+ - mongodbsearch/finalizers
167+ - mongodb/status
168+ - mongodbusers/status
169+ - opsmanagers/status
170+ - mongodbmulticluster/status
171+ - mongodbsearch/status
172+ verbs :
173+ - ' *'
174+ - apiGroups :
175+ - " "
176+ resources :
177+ - namespaces
178+ verbs :
179+ - list
180+ - watch
181+ ---
182+ apiVersion : rbac.authorization.k8s.io/v1
183+ kind : ClusterRoleBinding
184+ metadata :
185+ name : " ${DEPLOYMENT_NAME}-${DETIK_CLIENT_NAMESPACE}-mongodb"
186+ roleRef :
187+ apiGroup : rbac.authorization.k8s.io
188+ kind : ClusterRole
189+ name : " ${DEPLOYMENT_NAME}-${DETIK_CLIENT_NAMESPACE}-mongodb"
190+ subjects :
191+ - kind : ServiceAccount
192+ name : " mongodb-kubernetes-appdb"
193+ namespace : " ${DETIK_CLIENT_NAMESPACE}"
0 commit comments