Add group and fix iam-provider role naming

kubebb · May 13, 2023 · ab6cc9c · ab6cc9c
1 parent fef9fd9
commit ab6cc9c
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/u4a-component/templates/oidc-server/iam-provider-rbac.yaml b/u4a-component/templates/oidc-server/iam-provider-rbac.yaml
@@ -2,12 +2,13 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: t7d.io.user-role
+  name: t7d.io.iam-provider
 rules:
 - apiGroups:
   - iam.tenxcloud.com
   resources:
   - users
+  - groups
   verbs:
   - create
   - delete
@@ -57,12 +58,12 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: t7d.io.user-provider
+  name: t7d.io.iam-provider
   namespace: {{ .Release.Namespace }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: t7d.io.user-role
+  name: t7d.io.iam-provider
 subjects:
 - kind: ServiceAccount
   name: oidc-server