diff --git a/charts/argo-workflows/templates/controller/workflow-rb.yaml b/charts/argo-workflows/templates/controller/workflow-rb.yaml index a474692c..9846a5f0 100644 --- a/charts/argo-workflows/templates/controller/workflow-rb.yaml +++ b/charts/argo-workflows/templates/controller/workflow-rb.yaml @@ -1,34 +1,18 @@ -{{- define "workflow-rb-base" }} +{{- if .Values.workflow.rbac.create -}} + {{- range $namespace := append .Values.controller.workflowNamespaces .Values.workflow.namespace | compact | uniq }} --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: -{{- end }} - -{{- define "workflow-rb-roleref" }} + name: {{ template "argo-workflows.fullname" }}-workflow + namespace: {{ $namespace }} roleRef: apiGroup: rbac.authorization.k8s.io kind: Role -{{- end }} - -{{- define "workflow-rb-subjects" }} + name: {{ template "argo-workflows.fullname" $ }}-workflow subjects: - kind: ServiceAccount -{{- end }} - -{{- if .Values.workflow.rbac.create -}} - {{- range $namespace := append .Values.controller.workflowNamespaces .Values.workflow.namespace | compact | uniq }} - - {{ include "workflow-rb-base" . }} - name: {{ template "argo-workflows.fullname" }}-workflow - namespace: {{ $namespace }} - - {{- include "workflow-rb-roleref" . }} - name: {{ template "argo-workflows.fullname" $ }}-workflow - - {{- include "workflow-rb-subjects" . }} name: {{ $.Values.workflow.serviceAccount.name }} namespace: {{ $namespace }} {{- end }} - {{- end }}