Bump up Version

Author: Your Name

charts/opencloud-full/Chart.yaml

@@ -9,7 +9,7 @@ maintainers:
     email: [email protected]
     url: https://opencloud.eu
 type: application
-version: 3.1.1
+version: 3.1.2
 # renovate: datasource=docker depName=opencloudeu/opencloud-rolling
 appVersion: 3.1.0
 kubeVersion: ""

charts/opencloud-full/deployments/timoni/opencloud.cue

@@ -2,17 +2,17 @@ bundle: {
     apiVersion: "v1alpha1"
     name:       "opencloud"
     instances: {
-        "service-account": {
-            module: url: "oci://ghcr.io/stefanprodan/modules/flux-tenant"
-            namespace: "opencloud"
-            values: {
-                role: "namespace-admin"
-                resourceQuota: {
-                    kustomizations: 100
-                    helmreleases:   100
-                }
-            }
-        },
+        // "service-account": {
+        //     module: url: "oci://ghcr.io/stefanprodan/modules/flux-tenant"
+        //     namespace: "opencloud"
+        //     values: {
+        //         role: "namespace-admin"
+        //         resourceQuota: {
+        //             kustomizations: 100
+        //             helmreleases:   100
+        //         }
+        //     }
+        // },
         "opencloud": {
             module: {
                 url:     "oci://ghcr.io/stefanprodan/modules/flux-helm-release"

charts/opencloud-full/deployments/timoni/sa.yaml

@@ -0,0 +1,32 @@
+# 1) ServiceAccount — Flux will impersonate this
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: flux
+  namespace: opencloud        # <- target namespace
+---
+# 2) Role — full power *inside* that namespace
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: flux-full-access
+  namespace: opencloud
+rules:
+  - apiGroups:   ["*"]     # core & all groups
+    resources:   ["*"]     # every namespaced resource
+    verbs:       ["*"]     # get, list, create, delete, …
+---
+# 3) RoleBinding — ties the Role to the SA
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: flux-full-access-binding
+  namespace: opencloud
+subjects:
+  - kind:      ServiceAccount
+    name:      flux
+    namespace: opencloud
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind:     Role
+  name:     flux-full-access