rbac: Promoote rhel tenant to production (#613)

rhobs · Oct 3, 2023 · 95e9bd6 · 95e9bd6
1 parent e10e35d
commit 95e9bd6
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/configuration/observatorium/rbac.go b/configuration/observatorium/rbac.go
@@ -319,7 +319,7 @@ func GenerateRBAC(gen *mimic.Generator) {
 		tenant:  rhelTenant,
 		signals: []signal{metricsSignal},
 		perms:   []rbac.Permission{rbac.Read},
-		envs:    []env{stagingEnv},
+		envs:    []env{stagingEnv, productionEnv},
 	})
 	// RHEL
 	// Writer serviceaccount
@@ -328,7 +328,7 @@ func GenerateRBAC(gen *mimic.Generator) {
 		tenant:  rhelTenant,
 		signals: []signal{metricsSignal},
 		perms:   []rbac.Permission{rbac.Write},
-		envs:    []env{stagingEnv},
+		envs:    []env{stagingEnv, productionEnv},
 	})
 
 	// Use JSON because we want to have jsonnet using that in configmaps/secrets.

diff --git a/resources/services/observatorium-template.yaml b/resources/services/observatorium-template.yaml
@@ -967,12 +967,16 @@ objects:
         "subjects":
         - "kind": "user"
           "name": "service-account-observatorium-rhel-read-staging"
+        - "kind": "user"
+          "name": "service-account-observatorium-rhel-read"
       - "name": "observatorium-rhel-write"
         "roles":
         - "rhel-metrics-write"
         "subjects":
         - "kind": "user"
           "name": "service-account-observatorium-rhel-write-staging"
+        - "kind": "user"
+          "name": "service-account-observatorium-rhel-write"
       "roles":
       - "name": "cnvqe-metrics-write"
         "permissions":