From a9759c350b52c93b4bc55423308d71965305ff3e Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Sat, 17 Oct 2026 15:27:27 +0300
Subject: [PATCH] ++ runner cluster admin

---
 .../gitlab-runner/vk-prod/kustomization.yaml         |  1 +
 infrastructure/gitlab-runner/vk-prod/rbac.yaml       | 12 ++++++++++++
 2 files changed, 13 insertions(+)
 create mode 100644 infrastructure/gitlab-runner/vk-prod/rbac.yaml

diff --git a/infrastructure/gitlab-runner/vk-prod/kustomization.yaml b/infrastructure/gitlab-runner/vk-prod/kustomization.yaml
index fa82e31..2ff3376 100644
--- a/infrastructure/gitlab-runner/vk-prod/kustomization.yaml
+++ b/infrastructure/gitlab-runner/vk-prod/kustomization.yaml
@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - namespace.yaml
   - gitlab-runner.yaml
+  - rbac.yaml
diff --git a/infrastructure/gitlab-runner/vk-prod/rbac.yaml b/infrastructure/gitlab-runner/vk-prod/rbac.yaml
new file mode 100644
index 0000000..8743c83
--- /dev/null
+++ b/infrastructure/gitlab-runner/vk-prod/rbac.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitlab-runner-jobs-cluster-admin
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: cluster-admin
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: gitlab-managed-apps