diff --git a/charts/argo-rollouts/README.md b/charts/argo-rollouts/README.md index 8b8c4f3e..59f17eec 100644 --- a/charts/argo-rollouts/README.md +++ b/charts/argo-rollouts/README.md @@ -55,8 +55,9 @@ If dashboard is installed by `--set dashboard.enabled=true`, checkout the argo-r | notifications.secret.items | object | `{}` | Generic key:value pairs to be inserted into the notifications secret | | notifications.templates | object | `{}` | Notification templates | | notifications.triggers | object | `{}` | The trigger defines the condition when the notification should be sent | -| providerRBAC.enabled | bool | `true` | Adds provider-specific RBAC rules to the controller Role and ClusterRole | +| providerRBAC.enabled | bool | `true` | Enables addition of provider-specific RBAC rules to the controller Role and ClusterRole | | providerRBAC.providers.ambassador | bool | `true` | Adds RBAC rules for the Ambassador provider | +| providerRBAC.providers.apisix | bool | `true` | Adds RBAC rules for the Traefik provider | | providerRBAC.providers.awsAppMesh | bool | `true` | Adds RBAC rules for the AWS App Mesh provider | | providerRBAC.providers.awsLoadBalancerController | bool | `true` | Adds RBAC rules for the AWS Load Balancer Controller provider | | providerRBAC.providers.istio | bool | `true` | Adds RBAC rules for the Istio provider | diff --git a/charts/argo-rollouts/templates/controller/role.yaml b/charts/argo-rollouts/templates/controller/role.yaml index 13cacbf4..1347b110 100644 --- a/charts/argo-rollouts/templates/controller/role.yaml +++ b/charts/argo-rollouts/templates/controller/role.yaml @@ -208,6 +208,7 @@ rules: verbs: - list - get +{{- end }} {{- if .Values.providerRBAC.providers.awsAppMesh }} # AppMesh virtualservices/virtualrouter CRD read-only access needed for using the App Mesh provider - apiGroups: diff --git a/charts/argo-rollouts/values.yaml b/charts/argo-rollouts/values.yaml index f0c12dda..2092cf8b 100644 --- a/charts/argo-rollouts/values.yaml +++ b/charts/argo-rollouts/values.yaml @@ -191,8 +191,9 @@ imagePullSecrets: [] # - name: argo-pull-secret providerRBAC: - # -- Adds provider-specific RBAC rules to the controller Role and ClusterRole + # -- Enables addition of provider-specific RBAC rules to the controller Role and ClusterRole enabled: true + # providerRBAC.enabled must be true in order to toggle the individual providers providers: # -- Adds RBAC rules for the Istio provider istio: true @@ -206,6 +207,8 @@ providerRBAC: awsAppMesh: true # -- Adds RBAC rules for the Traefik provider traefik: true + # -- Adds RBAC rules for the Traefik provider + apisix: true dashboard: # -- Deploy dashboard server