Add clusterrolebinding to UI's default service account (#235)

To be allowed to create tokenreviews to query token's username.

Author: mareklibra

deploy-ui/deploy.sh

@@ -46,6 +46,7 @@ function deploy_ui() {
     render_file manifests/oauth-client.yaml
     render_file manifests/service.yaml
     render_file manifests/route.yaml
+    render_file manifests/clusterrolbinding.yaml
 }
 
 function verify_ui() {

deploy-ui/manifests/clusterrolbinding.yaml

@@ -0,0 +1,17 @@
+# Enable creating tokenreviews
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: sa-default-rbac
+  labels:
+    app: ztpfw-ui
+roleRef:
+  kind: ClusterRole
+  apiGroup: rbac.authorization.k8s.io
+  name: system:auth-delegator
+subjects:
+- kind: ServiceAccount
+  # name: system:serviceaccount:ztpfw-ui:default
+  name: default
+  namespace: $UI_NS
+