rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: remove spec wrapper from ClusterRoleBinding

Browse Source 
- ClusterRoleBinding doesn't use spec: wrapper (unlike Deployment/StatefulSet)
- roleRef and subjects go at top level with metadata
- Fixes: 'strict decoding error: unknown field "spec"'
This commit is contained in:
rock
2026-09-05 15:04:00 -07:00
parent f740076694
commit 7ac37c7ab5
1 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/infra/rbac/admin-oidc-binding.yaml
+2 -3
View File
@@ -2,12 +2,11 @@ apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: homelab-admin-oidc name: homelab-admin-oidc
spec: roleRef:
roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
name: cluster-admin name: cluster-admin
subjects: subjects:
# OIDC group for Authentik homelab-admins members # OIDC group for Authentik homelab-admins members
# When rock logs in via OIDC, k8s sees: # When rock logs in via OIDC, k8s sees:
# - User: oidc:[email protected] # - User: oidc:[email protected]