diff --git a/charts/argo-rollouts/Chart.yaml b/charts/argo-rollouts/Chart.yaml index 97cf311b..9cf45863 100644 --- a/charts/argo-rollouts/Chart.yaml +++ b/charts/argo-rollouts/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 appVersion: "v1.2.0" description: A Helm chart for Argo Rollouts name: argo-rollouts -version: 2.15.0 +version: 2.16.0 icon: https://argoproj.github.io/argo-rollouts/assets/logo.png home: https://github.com/argoproj/argo-helm maintainers: @@ -11,4 +11,4 @@ maintainers: - name: jessesuen annotations: artifacthub.io/changes: | - - "[Added]: option to enable PodDisruptionBudget for controller and dashboard" + - "[Added]: Argo rollouts dashboard cluster role readonly flags" diff --git a/charts/argo-rollouts/README.md b/charts/argo-rollouts/README.md index a39ed1e4..87a26250 100644 --- a/charts/argo-rollouts/README.md +++ b/charts/argo-rollouts/README.md @@ -121,6 +121,7 @@ If dashboard is installed by `--set dashboard.enabled=true`, checkout the argo-r | dashboard.pdb.minAvailable | string | `nil` | Minimum number / percentage of pods that should remain scheduled | | dashboard.podSecurityContext | object | `{"runAsNonRoot":true}` | Security Context to set on pod level | | dashboard.priorityClassName | string | `""` | [priorityClassName] for the dashboard server | +| dashboard.readonly | bool | `false` | Set cluster role to readonly | | dashboard.replicas | int | `1` | The number of dashboard pods to run | | dashboard.resources | object | `{}` | Resource limits and requests for the dashboard pods. | | dashboard.service.annotations | object | `{}` | Service annotations | @@ -168,4 +169,4 @@ Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/ [Tolerations]: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ [priorityClassName]: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/ [Pod Disruption Budget]: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/#pod-disruption-budgets -[values.yaml]: https://github.com/argoproj/argo-helm/blob/argo-rollouts-2.15.0/charts/argo-rollouts/values.yaml +[values.yaml]: https://github.com/argoproj/argo-helm/blob/argo-rollouts-2.16.0/charts/argo-rollouts/values.yaml diff --git a/charts/argo-rollouts/templates/dashboard/clusterrole.yaml b/charts/argo-rollouts/templates/dashboard/clusterrole.yaml index 20a3376c..8dd1ac6b 100644 --- a/charts/argo-rollouts/templates/dashboard/clusterrole.yaml +++ b/charts/argo-rollouts/templates/dashboard/clusterrole.yaml @@ -17,8 +17,10 @@ rules: - get - list - watch + {{- if not .Values.dashboard.readonly }} - update - patch + {{- end }} - apiGroups: - argoproj.io resources: @@ -27,7 +29,9 @@ rules: - experiments - experiments/finalizers verbs: + {{- if not .Values.dashboard.readonly }} - create + {{- end }} - get - list - watch diff --git a/charts/argo-rollouts/values.yaml b/charts/argo-rollouts/values.yaml index 46a64593..99d43d4e 100644 --- a/charts/argo-rollouts/values.yaml +++ b/charts/argo-rollouts/values.yaml @@ -151,6 +151,8 @@ imagePullSecrets: [] dashboard: # -- Deploy dashboard server enabled: false + # -- Set cluster role to readonly + readonly: false # -- Value of label `app.kubernetes.io/component` component: rollouts-dashboard # -- [Node selector]