Merge pull request #8535 from zalando-incubator/dev-to-eks

dev to eks
zalando-incubator · Nov 27, 2024 · f8f5633 · f8f5633
2 parents a06687b + 4d3058f
commit f8f5633
Show file tree

Hide file tree

Showing 4 changed files with 117 additions and 136 deletions.
diff --git a/cluster/manifests/roles/collaborator-roles.yaml b/cluster/manifests/roles/collaborator-roles.yaml
@@ -14,6 +14,16 @@ rules:
   - update
   - patch
   - delete
+{{ if eq .Cluster.ConfigItems.role_sync_controller_enabled "true" }}
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+{{ end }}
 ---
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1

diff --git a/cluster/manifests/roles/poweruser-role.yaml b/cluster/manifests/roles/poweruser-role.yaml
@@ -58,6 +58,7 @@ rules:
   - services/proxy
   verbs:
   - get
+{{ if ne .Cluster.ConfigItems.role_sync_controller_enabled "true" }}
 - apiGroups:
   - ''
   resources:
@@ -71,6 +72,7 @@ rules:
   - patch
   - update
   - watch
+{{ end }}
 - apiGroups:
   - ''
   - extensions