diff --git a/dev/argocd/catalog-info.yaml b/dev/argocd/catalog-info.yaml index cbe3d60..7ffd996 100644 --- a/dev/argocd/catalog-info.yaml +++ b/dev/argocd/catalog-info.yaml @@ -1,12 +1,11 @@ apiVersion: backstage.io/v1alpha1 kind: Component metadata: - annotations: - argocd.argoproj.io/hook: Skip name: dev-argocd title: Argocd (dev) description: ArgoCD-configuratie annotations: + argocd.argoproj.io/hook: Skip backstage.io/kubernetes-label-selector: "app=argocd" spec: type: service diff --git a/dev/backstage/backstage.yaml b/dev/backstage/backstage.yaml index 188bc5b..9b3c346 100644 --- a/dev/backstage/backstage.yaml +++ b/dev/backstage/backstage.yaml @@ -19,7 +19,7 @@ spec: serviceAccountName: backstage containers: - name: backstage - image: allardkrings/backstage:1.44 + image: allardkrings/backstage:1.44.0 imagePullPolicy: Always env: - name: PORT diff --git a/dev/backstage/service-account.yaml b/dev/backstage/service-account.yaml new file mode 100644 index 0000000..4730e4c --- /dev/null +++ b/dev/backstage/service-account.yaml @@ -0,0 +1,32 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: backstage + namespace: backstage +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: backstage + namespace: backstage +rules: + - apiGroups: [""] + resources: ["pods", "services", "configmaps", "endpoints", "secrets"] + verbs: ["get", "list", "watch"] + - apiGroups: ["apps"] + resources: ["deployments", "replicasets", "statefulsets"] + verbs: ["get", "list", "watch"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: backstage + namespace: backstage +subjects: + - kind: ServiceAccount + name: backstage + namespace: backstage +roleRef: + kind: Role + name: backstage + apiGroup: rbac.authorization.k8s.io