Merge pull request #11 from kool-dev/role_rolebinding

Adding Role and RoleBinding Support
kool-dev · Jan 8, 2021 · 879b2cf · 879b2cf
2 parents 91fcbde + 4db6e66
commit 879b2cf
Show file tree

Hide file tree

Showing 4 changed files with 28 additions and 2 deletions.
diff --git a/charts/generic/Chart.yaml b/charts/generic/Chart.yaml
@@ -1,4 +1,4 @@
 apiVersion: v2
 name: generic
 description: Generic Chart
-version: 1.2.4
+version: 1.3.0
diff --git a/charts/generic/templates/role.yaml b/charts/generic/templates/role.yaml
@@ -0,0 +1,7 @@
+{{- if and (.Values.serviceAccount.create) (.Values.serviceAccount.role.create) -}}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: Role
+metadata:
+  name: {{ include "generic.serviceAccountName" . }}
+rules: {{ .Values.serviceAccount.role.rules | nindent 2 }}
+{{- end }}
diff --git a/charts/generic/templates/rolebinding.yaml b/charts/generic/templates/rolebinding.yaml
@@ -0,0 +1,15 @@
+{{- if and (.Values.serviceAccount.create) (.Values.serviceAccount.role.create) -}}
+{{- $serviceAccountName := include "generic.serviceAccountName" . -}}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: RoleBinding
+metadata:
+  name: {{ $serviceAccountName }}
+subjects:
+ - kind: ServiceAccount
+   name: {{ $serviceAccountName }}
+   namespace: {{ .Release.Namespace }}
+roleRef:
+   kind: Role
+   name: {{ $serviceAccountName }}
+   apiGroup: rbac.authorization.k8s.io
+{{- end }}
diff --git a/charts/generic/values.yaml b/charts/generic/values.yaml
@@ -171,9 +171,13 @@ rollme: false
 
 serviceAccount:
   create: true
-  # annotations:
+  # annotations: {}
   name: ""
 
+  role:
+    create: false
+    rules: []
+
 # annotations: {}
 
 # securityContext: