Create role/role binding/service account required for builder/function pods (#2667)

* service account changes for fission-builder * moved code into executor * changed default timing to 30 min * code refactor and add new roles for executor * create role if serviceAccountCheck is enabled
2022-12-14 09:06:20 +05:30
parent 5fae765323
commit 16cbb87eab
5 changed files with 343 additions and 0 deletions
@@ -77,6 +77,12 @@ spec:
        - name: CONTAINER_OBJECT_REAPER_INTERVAL
          value: {{ .Values.executor.container.objectReaperInterval | quote }}
        {{- end}}
+        {{- if .Values.executor.serviceAccountCheck.enabled }}
+        - name: SERVICEACCOUNT_CHECK_ENABLED
+          value: {{ .Values.executor.serviceAccountCheck.enabled | quote }}  
+        - name: SERVICEACCOUNT_CHECK_INTERVAL
+          value: {{ .Values.executor.serviceAccountCheck.interval | quote }}
+        {{- end}}  
        {{- include "fission-resource-namespace.envs" . | indent 8 }}
        - name: HELM_RELEASE_NAME
          value: {{ .Release.Name | quote }}