From 31fbde46fab0dbed8c572573dfbc75593d9b3702 Mon Sep 17 00:00:00 2001
From: Max Resnick <max@ofmax.li>
Date: Mon, 15 Apr 2024 20:54:53 -0700
Subject: feat: kubernetes deployment manifests

adds deployment manifests for cgit and go-git-server
---
 manifests/base/cm.yaml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)
 create mode 100644 manifests/base/cm.yaml

(limited to 'manifests/base/cm.yaml')

diff --git a/manifests/base/cm.yaml b/manifests/base/cm.yaml
new file mode 100644
index 0000000..18423be
--- /dev/null
+++ b/manifests/base/cm.yaml
@@ -0,0 +1,25 @@
+apiVersion: v1
+data:
+  policy.csv: |
+    g, role:admin, role:maintainers
+    g, uid:admin, role:admin
+    g, uid:grumps, role:maintainers
+    g, aid:argo, role:bots
+  auth_model.ini: |
+    [request_definition]                                    
+    r = sub, obj, act                                       
+                                                            
+    [policy_definition]                                     
+    p = sub, obj, act                                       
+                                                            
+    [role_definition]                                       
+    g = _, _                                                
+                                                            
+    [policy_effect]                                         
+    e = some(where (p.eft == allow))                        
+                                                            
+    [matchers]                                              
+    m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act 
+kind: ConfigMap
+metadata:
+  name: go-git-policy
-- 
cgit v1.2.3