From c3a71a97a0cb825e5b1fac9e2c9a236ab35bf491 Mon Sep 17 00:00:00 2001
From: Sam Day <me@samcday.com>
Date: Sun, 23 Jun 2024 21:14:47 +0200
Subject: [PATCH] cluster: samcday@github is god

---
 cluster/kube-system/kustomization.yaml |  1 +
 cluster/kube-system/samcday-rbac.yaml  | 12 ++++++++++++
 2 files changed, 13 insertions(+)
 create mode 100644 cluster/kube-system/samcday-rbac.yaml

diff --git a/cluster/kube-system/kustomization.yaml b/cluster/kube-system/kustomization.yaml
index 311ddaff..d51a8904 100644
--- a/cluster/kube-system/kustomization.yaml
+++ b/cluster/kube-system/kustomization.yaml
@@ -26,6 +26,7 @@ resources:
   - nodes.yaml
   - plans/rebase-image.yaml
   - prometheus-operator.yaml
+  - samcday-rbac.yaml
   - system-upgrade-controller-crds.yaml
   - system-upgrade-controller.yaml
   - velero.yaml
diff --git a/cluster/kube-system/samcday-rbac.yaml b/cluster/kube-system/samcday-rbac.yaml
new file mode 100644
index 00000000..a1bb4a23
--- /dev/null
+++ b/cluster/kube-system/samcday-rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: samcday
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+- apiGroup: rbac.authorization.k8s.io
+  kind: User
+  name: samcday@github