fix(argo): Add RBAC permissions for v2.12.

Signed-off-by: Vlad Losev <vladimir.losev@sage.com>
This commit is contained in:
Vlad Losev 2021-01-11 14:26:31 -08:00
parent 182ef88c67
commit 2230b18c38
No known key found for this signature in database
GPG key ID: 3A3C3B9FAA3AB7AE
4 changed files with 36 additions and 3 deletions

View file

@ -1,8 +1,8 @@
apiVersion: v2 apiVersion: v2
appVersion: v2.11.7 appVersion: v2.12.3
description: A Helm chart for Argo Workflows description: A Helm chart for Argo Workflows
name: argo name: argo
version: 0.14.0 version: 0.15.0
icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
maintainers: maintainers:

View file

@ -24,12 +24,26 @@ rules:
- list - list
- watch - watch
- delete - delete
{{- if .Values.server.sso }}
- apiGroups:
- ""
resources:
- secrets
resourceNames:
- sso
verbs:
- get
- update
{{- end}}
{{- if .Values.server.rbac }}
- apiGroups: - apiGroups:
- "" - ""
resources: resources:
- serviceaccounts - serviceaccounts
verbs: verbs:
- get - get
- list
{{- end }}
- apiGroups: - apiGroups:
- "" - ""
resources: resources:

View file

@ -106,6 +106,25 @@ rules:
verbs: verbs:
- get - get
{{- end}} {{- end}}
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- apiGroups:
- coordination.k8s.io
resources:
- leases
resourceNames:
- workflow-controller
- workflow-controller-lease
verbs:
- get
- watch
- update
- patch
- delete
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole

View file

@ -7,7 +7,7 @@ images:
# Secrets with credentials to pull images from a private registry # Secrets with credentials to pull images from a private registry
pullSecrets: [] pullSecrets: []
# - name: argo-pull-secret # - name: argo-pull-secret
tag: v2.11.7 tag: v2.12.3
crdVersion: v1alpha1 crdVersion: v1alpha1
installCRD: true installCRD: true