stage developer access auth rules for dev env (#263)

davidcheung · web-flow · commit 2a753e29bf8e · 2022-03-14T17:44:35.000-04:00
diff --git a/templates/kubernetes/terraform/environments/stage/user_access.tf b/templates/kubernetes/terraform/environments/stage/user_access.tf
@@ -9,7 +9,7 @@ locals {
 
   # define Kubernetes policy for developer env deployment
   # TODO: given that in a small team, developers are given almost full permissions on Staging here. In the future, may limit the permissions to sub-namepsace per user.
-  k8s_developer_access = [
+  k8s_developer_access =  concat([
     # to support developer environment
     {
       verbs      = ["create", "exec", "list", "get", "delete", "patch", "update", "watch"]
@@ -22,7 +22,7 @@ locals {
         "secrets", "externalsecrets"
       ]
     }
-  ]
+  ], local.auth_deploy_rules)
 
   # define Kubernetes policy for operator
   k8s_operator_access = [

Original file line number	Diff line number	Diff line change
`@@ -9,7 +9,7 @@ locals {`
`9`	`9`
`10`	`10`	`# define Kubernetes policy for developer env deployment`
`11`	`11`	`# TODO: given that in a small team, developers are given almost full permissions on Staging here. In the future, may limit the permissions to sub-namepsace per user.`
`12`		`- k8s_developer_access = [`
	`12`	`+ k8s_developer_access = concat([`
`13`	`13`	`# to support developer environment`
`14`	`14`	`{`
`15`	`15`	`verbs = ["create", "exec", "list", "get", "delete", "patch", "update", "watch"]`
`@@ -22,7 +22,7 @@ locals {`
`22`	`22`	`"secrets", "externalsecrets"`
`23`	`23`	`]`
`24`	`24`	`}`
`25`		`- ]`
	`25`	`+ ], local.auth_deploy_rules)`
`26`	`26`
`27`	`27`	`# define Kubernetes policy for operator`
`28`	`28`	`k8s_operator_access = [`