Documentation
¶
Overview ¶
Package onboardmanifests generates the engineer cell's Kustomize resources for `seictl onboard`.
v1 ships three files: namespace, bare ServiceAccount (the K8s anchor for Pod Identity), and the kustomization that wires them together. No Role / RoleBinding — engineers operate as cluster-admin via SSO today; per-engineer scoped K8s identity is tracked at sei-protocol/seictl#80.
The ServiceAccount carries no eks.amazonaws.com/role-arn annotation — that's IRSA's pattern, not Pod Identity. EKS Pod Identity binds server-side via (cluster, namespace, serviceAccount); annotating the SA is at best a no-op and at worst misleading to readers.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
Directories
¶
| Path | Synopsis |
|---|---|
|
Package aggregator updates the cell-aggregator kustomization at `clusters/harbor/engineers/kustomization.yaml` so that each `seictl onboard --apply` PR is fully self-wired into Flux.
|
Package aggregator updates the cell-aggregator kustomization at `clusters/harbor/engineers/kustomization.yaml` so that each `seictl onboard --apply` PR is fully self-wired into Flux. |