Update deployment and rbac to watch globally

deployments/kubernetes/chart/reloader/templates/deployment.yaml

@@ -18,10 +18,12 @@ spec:
     spec:
       containers:
       - env:
+      {{- if eq .Values.reloader.watchGlobally false }}
         - name: KUBERNETES_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+      {{- end }}
         image: "{{ .Values.reloader.image.name }}:{{ .Values.reloader.image.tag }}"
         imagePullPolicy: {{ .Values.reloader.image.pullPolicy }}
         name: {{ template "reloader-name" . }}

deployments/kubernetes/chart/reloader/templates/rbac.yaml

@@ -6,6 +6,56 @@ metadata:
 {{ include "reloader-labels.chart" . | indent 4 }}
   name: {{ template "reloader-name" . }}
 ---
+{{- if .Values.reloader.watchGlobally }}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRole
+metadata:
+  labels: 
+{{ include "reloader-labels.stakater" . | indent 4 }}
+{{ include "reloader-labels.chart" . | indent 4 }}
+  name: {{ template "reloader-name" . }}-role
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups:
+      - ""
+    resources:      
+      - secrets
+      - configmaps
+    verbs:
+      - list
+      - get
+      - watch
+  - apiGroups:
+      - ""
+      - "extensions"
+      - "apps"
+    resources:
+      - deployments
+      - daemonsets
+      - statefulsets
+    verbs:
+      - list
+      - get
+      - update
+      - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: ClusterRoleBinding
+metadata:
+  labels: 
+{{ include "reloader-labels.stakater" . | indent 4 }}
+{{ include "reloader-labels.chart" . | indent 4 }}
+  name: {{ template "reloader-name" . }}-role-binding
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ template "reloader-name" . }}-role
+subjects:
+  - kind: ServiceAccount
+    name: {{ template "reloader-name" . }}
+    namespace: {{ .Release.Namespace }}
+{{- else }}
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: Role
 metadata:
@@ -53,4 +103,5 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: {{ template "reloader-name" . }}
-    namespace: {{ .Release.Namespace }}
+    namespace: {{ .Release.Namespace }}
+{{- end }}

deployments/kubernetes/chart/reloader/values.yaml

@@ -11,4 +11,5 @@ reloader:
   image:
     name: stakater/reloader
     tag: "0.0.2"
-    pullPolicy: IfNotPresent
+    pullPolicy: IfNotPresent
+  watchGlobally: false

deployments/kubernetes/templates/chart/values.yaml.tmpl

@@ -11,4 +11,5 @@ reloader:
   image:
     name: {{ getenv "DOCKER_IMAGE" }}
     tag: "{{ getenv "VERSION" }}"
-    pullPolicy: IfNotPresent
+    pullPolicy: IfNotPresent
+  watchGlobally: false