#866: Security ClusterRole - Helm Chart (#875)

Co-authored-by: Gianluca Di Vincenzo <g.divincenzo@xtribeapp.com>

deployments/kubernetes/chart/reloader/templates/clusterrole.yaml

@@ -76,6 +76,7 @@ rules:
       - get
       - update
       - patch
+{{- if .Values.reloader.ignoreCronJobs }}{{- else }}
   - apiGroups:
       - "batch"
     resources:
@@ -83,6 +84,8 @@ rules:
     verbs:
       - list
       - get
+{{- end }}
+{{- if .Values.reloader.ignoreJobs }}{{- else }}
   - apiGroups:
       - "batch"
     resources:
@@ -92,6 +95,7 @@ rules:
       - delete
       - list
       - get
+{{- end}}
 {{- if .Values.reloader.enableHA }}
   - apiGroups:
       - "coordination.k8s.io"

deployments/kubernetes/chart/reloader/values.yaml

@@ -27,6 +27,8 @@ reloader:
   isOpenshift: false
   ignoreSecrets: false
   ignoreConfigMaps: false
+  ignoreJobs: false
+  ignoreCronJobs: false
   reloadOnCreate: false
   reloadOnDelete: false
   syncAfterRestart: false