apiVersion: v1
kind: ConfigMap
metadata:
  name: oneconfig-account
data:
  config.yaml: |
    grpc:
      accountProviderSvcAddr: account-provider-grpc:10000
    server:
      grpcPort: "50051"
      httpPort: "8080"
      metricsPort: "9090"
      logLevel: debug
      env: local
    sentry:
      dsn: ""
      env: local
      logLevel: error
    mysql:
      host: account-metadb
      user: root
      port: 3306
      database: account
      charset: utf8mb4
      collation: utf8mb4_bin
      timezone: UTC
    oauth2:
      verificationURI: http://localhost:8080/oauth/device
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: authserver-oneconfig-reader
rules:
  - apiGroups: [""]
    resources: ["configmaps"]
    resourceNames: ["oneconfig-account"]
    verbs: ["get"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: authserver-oneconfig-reader
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: authserver-oneconfig-reader
subjects:
  - kind: ServiceAccount
    name: default