From 138f4056109ed131aa2647ac74d627a388634180 Mon Sep 17 00:00:00 2001
From: Jordan Moore <1930631+OneCricketeer@users.noreply.github.com>
Date: Tue, 10 Jan 2023 14:27:28 -0600
Subject: [PATCH] Only enable PVC RBAC when persistence is enabled

Seems like PVC would only be needed for the database, which is under the same condition.

Signed-off-by: Jordan Moore <1930631+OneCricketeer@users.noreply.github.com>
---
 .../workflow-controller-cluster-roles.yaml    | 20 +++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/charts/argo-workflows/templates/controller/workflow-controller-cluster-roles.yaml b/charts/argo-workflows/templates/controller/workflow-controller-cluster-roles.yaml
index 34f91c0d..a8a6867c 100644
--- a/charts/argo-workflows/templates/controller/workflow-controller-cluster-roles.yaml
+++ b/charts/argo-workflows/templates/controller/workflow-controller-cluster-roles.yaml
@@ -31,16 +31,6 @@ rules:
   - get
   - watch
   - list
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  - persistentvolumeclaims/finalizers
-  verbs:
-  - create
-  - update
-  - delete
-  - get
 - apiGroups:
   - argoproj.io
   resources:
@@ -110,6 +100,16 @@ rules:
   - get
   - delete
 {{- if .Values.controller.persistence }}
+- apiGroups:
+  - ""
+  resources:
+  - persistentvolumeclaims
+  - persistentvolumeclaims/finalizers
+  verbs:
+  - create
+  - update
+  - delete
+  - get
 - apiGroups:
   - ""
   resources: