fix

apps/gramo/index.yaml

@@ -11,26 +11,46 @@ options:
     examples:
     - false
     type: boolean
+  cluster-admin:
+    default: false
+    examples:
+    - false
+    type: boolean
   namespaces:
     default: []
     items:
       type: string
     type: array
-  app-group:
-    default: infra
+  sub-domain:
+    default: gramo
     examples:
-    - infra
+    - gramo
+    type: string
+  domain:
+    default: your-company
+    examples:
+    - your-company
+    type: string
+  issuer:
+    default: letsencrypt-prod
+    examples:
+    - letsencrypt-prod
     type: string
   ingress-class:
     default: traefik
     examples:
     - traefik
     type: string
-  cluster-admin:
-    default: false
+  domain-name:
+    default: your_company.com
     examples:
-    - false
-    type: boolean
+    - your_company.com
+    type: string
+  app-group:
+    default: infra
+    examples:
+    - infra
+    type: string
   images:
     default:
       gramo:
@@ -70,26 +90,6 @@ options:
             type: string
         type: object
     type: object
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
-  domain-name:
-    default: your_company.com
-    examples:
-    - your_company.com
-    type: string
-  sub-domain:
-    default: gramo
-    examples:
-    - gramo
-    type: string
-  domain:
-    default: your-company
-    examples:
-    - your-company
-    type: string
 dependencies:
 - dist: null
   category: share

apps/gramo/rbac.tf

@@ -77,15 +77,15 @@ resource "kubectl_manifest" "gramo_clusterrole" {
       labels: ${jsonencode(local.common-labels)}
     rules:
     - apiGroups: [""]
-      resources: ["namespaces","customresourcedefinitions"]
-      verbs: ["get","list"]
-    - apiGroups: ["apiextensions.k8s.io"]
-      resources: ["customresourcedefinitions"]
+      resources: ["namespaces"]
       resourceNames: ${jsonencode(local.sorted-namespaces)}
       verbs: ["get"]
     - apiGroups: [""]
       resources: ["namespaces"]
       verbs: ["list"]
+    - apiGroups: ["apiextensions.k8s.io"]
+      resources: ["customresourcedefinitions"]
+      verbs: ["get","list"]
   EOF
 }