fix: Deployer user didn't have access to modify externalsecrets, other small fixes (#211)

Author: bmonkman

Makefile

@@ -12,6 +12,6 @@ summary:
 	@echo "- Repository URL: ${REPOSITORY}"
 	@echo "- To see your kubernetes clusters, run: 'kubectl config get-contexts'"
 	@echo "- To switch to a cluster, use the following commands:"
-	@echo $(shell [[ "${ENVIRONMENT}" =~ "production" ]] && echo "- for production use: kubectl config use-context $(shell kubectl config get-contexts -o name | grep ${PROJECT_NAME}-production)")
-	@echo $(shell [[ "${ENVIRONMENT}" =~ "staging" ]] && echo "- for staging use: kubectl config use-context $(shell kubectl config get-contexts -o name | grep ${PROJECT_NAME}-staging)")
+	@echo $(shell [[ "${ENVIRONMENT}" =~ "prod" ]] && echo "- for production use: kubectl config use-context $(shell kubectl config get-contexts -o name | grep ${PROJECT_NAME}-prod)")
+	@echo $(shell [[ "${ENVIRONMENT}" =~ "stage" ]] && echo "- for staging use: kubectl config use-context $(shell kubectl config get-contexts -o name | grep ${PROJECT_NAME}-stage)")
 	@echo "- To inspect the selected cluster, run 'kubectl get node,service,deployment,pods'"

scripts/check.sh

@@ -217,7 +217,7 @@ locals {
       verbs      = ["exec", "create", "list", "get", "delete", "patch", "update", "watch"]
       api_groups = ["*"]
       resources = ["deployments", "configmaps", "pods", "pods/exec", "pods/log", "pods/status", "pods/portforward",
-        "nodes", "jobs", "cronjobs", "statefulsets", "secrets", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
+        "nodes", "jobs", "cronjobs", "statefulsets", "secrets", "externalsecrets", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
         "horizontalpodautoscalers", "horizontalpodautoscalers/status",
         "poddisruptionbudgets", "replicasets", "replicationcontrollers"
       ]
@@ -232,7 +232,7 @@ locals {
       resources = ["deployments", "configmaps", "pods", "pods/log", "pods/status",
         "jobs", "cronjobs", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
         "horizontalpodautoscalers", "horizontalpodautoscalers/status",
-        "poddisruptionbudgets", "replicasets"
+        "poddisruptionbudgets", "replicasets", "externalsecrets"
       ]
     },
     {

templates/terraform/environments/prod/user_access.tf

@@ -237,7 +237,7 @@ locals {
         "replicasets", "horizontalpodautoscalers", "horizontalpodautoscalers/status",
         "ingresses", "services", "serviceaccounts",
         "poddisruptionbudgets",
-        "secrets"
+        "secrets", "externalsecrets"
       ]
     }
   ]
@@ -263,7 +263,7 @@ locals {
       verbs      = ["exec", "create", "list", "get", "delete", "patch", "update", "watch"]
       api_groups = ["*"]
       resources = ["deployments", "configmaps", "pods", "pods/exec", "pods/log", "pods/status", "pods/portforward",
-        "nodes", "jobs", "cronjobs", "statefulsets", "secrets", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
+        "nodes", "jobs", "cronjobs", "statefulsets", "secrets", "externalsecrets", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
         "horizontalpodautoscalers", "horizontalpodautoscalers/status",
         "poddisruptionbudgets", "replicasets", "replicationcontrollers"
       ]
@@ -278,7 +278,7 @@ locals {
       resources = ["deployments", "configmaps", "pods", "pods/log", "pods/status",
         "jobs", "cronjobs", "services", "daemonsets", "endpoints", "namespaces", "events", "ingresses",
         "horizontalpodautoscalers", "horizontalpodautoscalers/status",
-        "poddisruptionbudgets", "replicasets"
+        "poddisruptionbudgets", "replicasets", "externalsecrets"
       ]
     },
     {

templates/terraform/environments/stage/user_access.tf

@@ -56,7 +56,7 @@ data "aws_caller_identity" "current" {}
 # Provision the EKS cluster
 module "eks" {
   source  = "commitdev/zero/aws//modules/eks"
-  version = "0.4.4"
+  version = "0.4.5"
   providers = {
     aws = aws.for_eks
   }