diff --git a/packages/system/dashboard/templates/console-rbac.yaml b/packages/system/dashboard/templates/console-rbac.yaml new file mode 100644 index 00000000..1bedf2cf --- /dev/null +++ b/packages/system/dashboard/templates/console-rbac.yaml @@ -0,0 +1,28 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: cozy-dashboard-console-config-reader + namespace: cozy-dashboard +rules: +- apiGroups: + - "" + resources: + - configmaps + resourceNames: + - cozy-dashboard-console-config + verbs: + - get +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: cozy-dashboard-console-config-reader + namespace: cozy-dashboard +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: cozy-dashboard-console-config-reader +subjects: +- apiGroup: rbac.authorization.k8s.io + kind: Group + name: system:authenticated diff --git a/packages/system/dashboard/templates/console.yaml b/packages/system/dashboard/templates/console.yaml index 253092bf..ee12afdd 100644 --- a/packages/system/dashboard/templates/console.yaml +++ b/packages/system/dashboard/templates/console.yaml @@ -83,14 +83,6 @@ spec: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File - volumeMounts: - - name: console-config - mountPath: /usr/share/nginx/html/config.json - subPath: config.json - volumes: - - name: console-config - configMap: - name: cozy-dashboard-console-config dnsPolicy: ClusterFirst enableServiceLinks: false hostIPC: false