jasonwittyandClaude Opus 5 146e01f018 Grant the deploy pipeline configmaps and batch/cronjobs ...

apps/limesurvey introduced the first ConfigMap and CronJob in this repo, and
CI's server-side dry-run failed on both:

  configmaps "limesurvey-db-config" is forbidden
  cronjobs.batch "limesurvey-db-backup" is forbidden

The ClusterRole grants exactly the resource kinds this repo contains, so it
needed to grow with the repo. Applied out-of-band by an admin as the file's
header requires -- this is deliberately not part of the root kustomization, so
the pipeline cannot widen its own permissions.

secrets remain denied; verified after applying.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-20 19:56:10 -07:00

..

gitea-deployer.yaml

Grant the deploy pipeline configmaps and batch/cronjobs

2026-09-20 19:56:10 -07:00