Break workflow role into one yaml file per object for yamllint

.github/workflows/yamllint.yaml

@@ -47,6 +47,7 @@ jobs:
             workflows/argo-events/sensors/*.y*ml
             workflows/argo-events/eventsources/*.y*ml
             workflows/argo-events/roles/*.y*ml
+            workflows/argo-events/rolebindings/*.y*ml
             workflows/argo-events/workflowtemplates/*.y*ml
             workflows/openstack/*.y*ml
 

apps/appsets/workflows.yaml

@@ -23,7 +23,7 @@ spec:
           path: 'workflows/argo-events'
           directory:
             recurse: true
-            include: '{roles/*.yaml,secrets/*.yaml,sensors/*yaml,eventsources/*.yaml,workflowtemplates/*.yaml}'
+            include: '{roles/*.yaml,rolebindings/*.yaml,secrets/*.yaml,sensors/*yaml,eventsources/*.yaml,workflowtemplates/*.yaml}'
         - repoURL: '{{index .metadata.annotations "uc_deploy_git_url"}}'
           targetRevision: '{{index .metadata.annotations "uc_deploy_ref"}}'
           path: 'argo-workflows'

workflows/argo-events/kustomization.yaml

@@ -17,6 +17,7 @@ resources:
   - sensors/nb-oob-interface-update.yaml
   - eventsources/nautobot-webhook.yaml
   - roles/sensor-submit-workflow-role.yaml
+  - rolebindings/openstack-sensor-submit-workflow.yaml
   - workflowtemplates/nautobot-api.yaml
   - workflowtemplates/get-device-nautobot.yaml
   - workflowtemplates/sync-interfaces-to-nautobot.yaml

workflows/argo-events/rolebindings/openstack-sensor-submit-workflow.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: openstack-sensor-submit-workflow
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: sensor-submit-workflow-role
+subjects:
+  - kind: ServiceAccount
+    name: sensor-submit-workflow
+    namespace: openstack

workflows/argo-events/roles/sensor-submit-workflow-role.yaml

@@ -25,16 +25,3 @@ rules:
       - patch
     resources:
       - workflows
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: openstack-sensor-submit-workflow
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: sensor-submit-workflow-role
-subjects:
-  - kind: ServiceAccount
-    name: sensor-submit-workflow
-    namespace: openstack

workflows/openstack/kustomization.yaml

@@ -8,3 +8,4 @@ resources:
   - eventbus-default.yaml
   - openstack-event-source.yaml
   - sensor-keystone-event-project.yaml
+  - serviceaccount-sensor-submit-workflow.yaml

workflows/openstack/sensor-keystone-event-project.yaml

@@ -1,9 +1,4 @@
 ---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: sensor-submit-workflow
----
 apiVersion: argoproj.io/v1alpha1
 kind: Sensor
 metadata:

workflows/openstack/serviceaccount-sensor-submit-workflow.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: sensor-submit-workflow