diff --git a/components/vector-kubearchive-log-collector/base/kustomization.yaml b/components/vector-kubearchive-log-collector/base/kustomization.yaml index 11a853177cc..03157b9aa3c 100644 --- a/components/vector-kubearchive-log-collector/base/kustomization.yaml +++ b/components/vector-kubearchive-log-collector/base/kustomization.yaml @@ -6,3 +6,4 @@ commonAnnotations: resources: - vector-pre.yaml +- rbac.yaml diff --git a/components/vector-kubearchive-log-collector/base/rbac.yaml b/components/vector-kubearchive-log-collector/base/rbac.yaml new file mode 100644 index 00000000000..bd7200a273c --- /dev/null +++ b/components/vector-kubearchive-log-collector/base/rbac.yaml @@ -0,0 +1,28 @@ +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubearchive-logging-component-maintainers + namespace: product-kubearchive-logging +subjects: + - kind: Group + apiGroup: rbac.authorization.k8s.io + name: konflux-kubearchive # rover group +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: component-maintainer +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: kubearchive-logging-admin + namespace: product-kubearchive-logging +subjects: + - kind: Group + apiGroup: rbac.authorization.k8s.io + name: konflux-kubearchive # rover group +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: admin