mirror of
https://github.com/stakater/Reloader.git
synced 2026-08-23 22:16:45 +00:00
85 lines
2.8 KiB
YAML
85 lines
2.8 KiB
YAML
{{- if and (not (.Values.reloader.watchGlobally)) (.Values.reloader.rbac.enabled) }}
|
|
{{- $apiVersion := "rbac.authorization.k8s.io/v1" }}
|
|
{{- if not (.Capabilities.APIVersions.Has "rbac.authorization.k8s.io/v1") }}
|
|
{{- $apiVersion = "rbac.authorization.k8s.io/v1beta1" }}
|
|
{{- end }}
|
|
{{- if (include "reloader-isScoped" .) }}
|
|
{{- range $ns := (include "reloader-watchNamespaces" . | mustFromJson) }}
|
|
apiVersion: {{ $apiVersion }}
|
|
kind: RoleBinding
|
|
metadata:
|
|
annotations:
|
|
{{ include "reloader-helm3.annotations" $ | indent 4 }}
|
|
labels:
|
|
{{ include "reloader-labels.chart" $ | indent 4 }}
|
|
{{- if $.Values.reloader.rbac.labels }}
|
|
{{ tpl (toYaml $.Values.reloader.rbac.labels) $ | indent 4 }}
|
|
{{- end }}
|
|
{{- if $.Values.reloader.matchLabels }}
|
|
{{ tpl (toYaml $.Values.reloader.matchLabels) $ | indent 4 }}
|
|
{{- end }}
|
|
name: {{ template "reloader-fullname" $ }}-role-binding
|
|
namespace: {{ $ns }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: {{ template "reloader-fullname" $ }}-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: {{ template "reloader-serviceAccountName" $ }}
|
|
namespace: {{ $.Values.namespace | default $.Release.Namespace }}
|
|
---
|
|
{{- end }}
|
|
{{- else }}
|
|
apiVersion: {{ $apiVersion }}
|
|
kind: RoleBinding
|
|
metadata:
|
|
annotations:
|
|
{{ include "reloader-helm3.annotations" . | indent 4 }}
|
|
labels:
|
|
{{ include "reloader-labels.chart" . | indent 4 }}
|
|
{{- if .Values.reloader.rbac.labels }}
|
|
{{ tpl (toYaml .Values.reloader.rbac.labels) . | indent 4 }}
|
|
{{- end }}
|
|
{{- if .Values.reloader.matchLabels }}
|
|
{{ tpl (toYaml .Values.reloader.matchLabels) . | indent 4 }}
|
|
{{- end }}
|
|
name: {{ template "reloader-fullname" . }}-role-binding
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: {{ template "reloader-fullname" . }}-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: {{ template "reloader-serviceAccountName" . }}
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
---
|
|
{{- if .Values.reloader.rbac.enabled }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
annotations:
|
|
{{ include "reloader-helm3.annotations" . | indent 4 }}
|
|
labels:
|
|
{{ include "reloader-labels.chart" . | indent 4 }}
|
|
{{- if .Values.reloader.rbac.labels }}
|
|
{{ tpl (toYaml .Values.reloader.rbac.labels) . | indent 4 }}
|
|
{{- end }}
|
|
{{- if .Values.reloader.matchLabels }}
|
|
{{ tpl (toYaml .Values.reloader.matchLabels) . | indent 4 }}
|
|
{{- end }}
|
|
name: {{ template "reloader-fullname" . }}-metadata-role-binding
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: {{ template "reloader-fullname" . }}-metadata-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: {{ template "reloader-serviceAccountName" . }}
|
|
namespace: {{ .Values.namespace | default .Release.Namespace }}
|
|
{{- end }} |