func GetBootstrapServiceAccountProjectRoleBindings(namespace string) []authorizationapi.RoleBinding { return []authorizationapi.RoleBinding{ { ObjectMeta: kapi.ObjectMeta{ Name: ImagePullerRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: ImagePullerRoleName, }, Subjects: []kapi.ObjectReference{{Kind: authorizationapi.SystemGroupKind, Name: serviceaccount.MakeNamespaceGroupName(namespace)}}, }, { ObjectMeta: kapi.ObjectMeta{ Name: ImageBuilderRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: ImageBuilderRoleName, }, Subjects: []kapi.ObjectReference{{Kind: authorizationapi.ServiceAccountKind, Name: BuilderServiceAccountName}}, }, { ObjectMeta: kapi.ObjectMeta{ Name: DeployerRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: DeployerRoleName, }, Subjects: []kapi.ObjectReference{{Kind: authorizationapi.ServiceAccountKind, Name: DeployerServiceAccountName}}, }, } }
func GetBootstrapServiceAccountProjectRoleBindings(namespace string) []authorizationapi.RoleBinding { return []authorizationapi.RoleBinding{ { ObjectMeta: kapi.ObjectMeta{ Name: ImagePullerRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: ImagePullerRoleName, }, Groups: util.NewStringSet(serviceaccount.MakeNamespaceGroupName(namespace)), }, { ObjectMeta: kapi.ObjectMeta{ Name: ImageBuilderRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: ImageBuilderRoleName, }, Users: util.NewStringSet(serviceaccount.MakeUsername(namespace, BuilderServiceAccountName)), }, { ObjectMeta: kapi.ObjectMeta{ Name: DeployerRoleBindingName, Namespace: namespace, }, RoleRef: kapi.ObjectReference{ Name: DeployerRoleName, }, Users: util.NewStringSet(serviceaccount.MakeUsername(namespace, DeployerServiceAccountName)), }, } }