move to improved onion service handlingonion

(not finished yet)

1 files changed, 13 insertions, 0 deletions

diff --git a/templates/default/kubernetes/stream-site-onion-rolebinding.yml.j2 b/templates/default/kubernetes/stream-site-onion-rolebinding.yml.j2
new file mode 100644
index 0000000..7b3ef4f
--- /dev/null
+++ b/templates/default/kubernetes/stream-site-onion-rolebinding.yml.j2
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  namespace: {{ deploy.namespace }}
+  name: site-onion
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: onion-service
+subjects:
+- kind: ServiceAccount
+  name: site-onion
+  namespace: {{ deploy.namespace }}