From 7d5ae150e4a998aaa841b24a22f369325b32bdae Mon Sep 17 00:00:00 2001
From: Simen Kirkvik <simen.kirkvik@oceanbox.io>
Date: Sat, 27 Sep 2025 16:37:48 +0200
Subject: [PATCH 1/2] fix(atlantis): Allow get secret slurm-access-token in
 rbac

---
 values/atlantis/kustomize/prod/rbac.yaml    | 1 +
 values/atlantis/kustomize/staging/rbac.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/values/atlantis/kustomize/prod/rbac.yaml b/values/atlantis/kustomize/prod/rbac.yaml
index 772c7a95..6d13b929 100644
--- a/values/atlantis/kustomize/prod/rbac.yaml
+++ b/values/atlantis/kustomize/prod/rbac.yaml
@@ -18,6 +18,7 @@ rules:
   resourceNames:
   - azure-keyvault
   - prod-atlantis-redis
+  - slurm-access-token
   resources:
   - secrets
   verbs:
diff --git a/values/atlantis/kustomize/staging/rbac.yaml b/values/atlantis/kustomize/staging/rbac.yaml
index 665b0a7e..953181c6 100644
--- a/values/atlantis/kustomize/staging/rbac.yaml
+++ b/values/atlantis/kustomize/staging/rbac.yaml
@@ -18,6 +18,7 @@ rules:
   resourceNames:
   - azure-keyvault
   - staging-atlantis-redis
+  - slurm-access-token
   resources:
   - secrets
   verbs:

From b640b305f671392aec5ff42b31b03353696e869a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Sat, 27 Sep 2025 16:52:34 +0200
Subject: [PATCH 2/2] fix(hs): Persist order

---
 values/headscale/values/values.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/values/headscale/values/values.yaml b/values/headscale/values/values.yaml
index 1f0a3c31..bf67baab 100644
--- a/values/headscale/values/values.yaml
+++ b/values/headscale/values/values.yaml
@@ -175,8 +175,6 @@ configMaps:
               "action": "accept",
               "src": [ "group:hpc-clusters" ],
               "dst": [
-                "ekman-manage:*",
-                "rossby-manage:*",
                 "net.dc.tos:*",
                 "net.mgmt.tos:*",
                 "net.ceph.tos:*",
@@ -184,6 +182,8 @@ configMaps:
                 "net.rossby:*",
                 "net.mgmt.rossby:*",
                 "net.dc.tos:*",
+                "ekman-manage:*",
+                "rossby-manage:*",
               ]
             },
             {