diff options
Diffstat (limited to 'manifests/base/cm.yaml')
| -rw-r--r-- | manifests/base/cm.yaml | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/manifests/base/cm.yaml b/manifests/base/cm.yaml new file mode 100644 index 0000000..18423be --- /dev/null +++ b/manifests/base/cm.yaml @@ -0,0 +1,25 @@ +apiVersion: v1 +data: + policy.csv: | + g, role:admin, role:maintainers + g, uid:admin, role:admin + g, uid:grumps, role:maintainers + g, aid:argo, role:bots + auth_model.ini: | + [request_definition] + r = sub, obj, act + + [policy_definition] + p = sub, obj, act + + [role_definition] + g = _, _ + + [policy_effect] + e = some(where (p.eft == allow)) + + [matchers] + m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act +kind: ConfigMap +metadata: + name: go-git-policy |