From 5beef5748e318b0054653407885b23e556a8622d Mon Sep 17 00:00:00 2001
From: allard <admin@alldcs.nl>
Date: Wed, 3 Dec 2025 11:06:13 +0100
Subject: [PATCH] change

---
 dev/argocd/catalog-info.yaml       |  3 +--
 dev/backstage/backstage.yaml       |  2 +-
 dev/backstage/service-account.yaml | 32 ++++++++++++++++++++++++++++++
 3 files changed, 34 insertions(+), 3 deletions(-)
 create mode 100644 dev/backstage/service-account.yaml

diff --git a/dev/argocd/catalog-info.yaml b/dev/argocd/catalog-info.yaml
index cbe3d60..7ffd996 100644
--- a/dev/argocd/catalog-info.yaml
+++ b/dev/argocd/catalog-info.yaml
@@ -1,12 +1,11 @@
 apiVersion: backstage.io/v1alpha1
 kind: Component
 metadata:
-  annotations:
-    argocd.argoproj.io/hook: Skip
   name: dev-argocd
   title: Argocd (dev)
   description: ArgoCD-configuratie
   annotations:
+    argocd.argoproj.io/hook: Skip
     backstage.io/kubernetes-label-selector: "app=argocd"
 spec:
   type: service
diff --git a/dev/backstage/backstage.yaml b/dev/backstage/backstage.yaml
index 188bc5b..9b3c346 100644
--- a/dev/backstage/backstage.yaml
+++ b/dev/backstage/backstage.yaml
@@ -19,7 +19,7 @@ spec:
       serviceAccountName: backstage
       containers:
         - name: backstage
-          image: allardkrings/backstage:1.44
+          image: allardkrings/backstage:1.44.0
           imagePullPolicy: Always
           env:
             - name: PORT
diff --git a/dev/backstage/service-account.yaml b/dev/backstage/service-account.yaml
new file mode 100644
index 0000000..4730e4c
--- /dev/null
+++ b/dev/backstage/service-account.yaml
@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: backstage
+  namespace: backstage
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: backstage
+  namespace: backstage
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "services", "configmaps", "endpoints", "secrets"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["apps"]
+    resources: ["deployments", "replicasets", "statefulsets"]
+    verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: backstage
+  namespace: backstage
+subjects:
+  - kind: ServiceAccount
+    name: backstage
+    namespace: backstage
+roleRef:
+  kind: Role
+  name: backstage
+  apiGroup: rbac.authorization.k8s.io