Runit MisraandGitHub
7eeb3ead66
* Role and RoleBinding for fission-fetcher and fission-builder can be created in additional namespaces * Added template file for fetcher and builder role and rolebinding
27 lines
886 B
YAML
27 lines
886 B
YAML
{{/*
|
|
Passing namespace as an argument to the "fissionFunction.rolebindings" template.
|
|
Need to use merge function to pass in the current scope so that ".Release" values
|
|
can be used
|
|
*/}}
|
|
{{ include "fissionFunction.rolebindings" (merge (dict "namespace" .Values.defaultNamespace) .) }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: {{ .Release.Name }}-fission-fetcher-pod-reader
|
|
namespace: {{ .Values.functionNamespace }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: {{ .Release.Name }}-event-fetcher
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: fission-fetcher
|
|
namespace: {{ .Values.functionNamespace }}
|
|
|
|
{{- if not .Values.singleDefaultNamespace }}
|
|
{{- range $namespace := $.Values.additionalFissionNamespaces }}
|
|
{{ include "fissionFunction.rolebindings" (merge (dict "namespace" $namespace) $) }}
|
|
{{- end }}
|
|
{{- end }}
|