Allow customizing additional RBAC rules for other providers

Signed-off-by: Alvaro.Camina <alvaro.camina@alteryx.com>
This commit is contained in:
Alvaro.Camina 2024-02-29 13:25:09 +01:00
parent 48824664e9
commit 6491e3b797
4 changed files with 18 additions and 12 deletions

View file

@ -2,7 +2,7 @@ apiVersion: v2
appVersion: v1.6.6 appVersion: v1.6.6
description: A Helm chart for Argo Rollouts description: A Helm chart for Argo Rollouts
name: argo-rollouts name: argo-rollouts
version: 2.34.3 version: 2.34.4
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
icon: https://argoproj.github.io/argo-rollouts/assets/logo.png icon: https://argoproj.github.io/argo-rollouts/assets/logo.png
keywords: keywords:
@ -18,5 +18,5 @@ annotations:
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252 fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
url: https://argoproj.github.io/argo-helm/pgp_keys.asc url: https://argoproj.github.io/argo-helm/pgp_keys.asc
artifacthub.io/changes: | artifacthub.io/changes: |
- kind: changed - kind: added
description: Bump argo-rollouts to v1.6.6 description: Allow customizing additional RBAC rules for other providers

View file

@ -70,6 +70,7 @@ For full list of changes please check ArtifactHub [changelog].
| providerRBAC.providers.istio | bool | `true` | Adds RBAC rules for the Istio provider | | providerRBAC.providers.istio | bool | `true` | Adds RBAC rules for the Istio provider |
| providerRBAC.providers.smi | bool | `true` | Adds RBAC rules for the SMI provider | | providerRBAC.providers.smi | bool | `true` | Adds RBAC rules for the SMI provider |
| providerRBAC.providers.traefik | bool | `true` | Adds RBAC rules for the Traefik provider | | providerRBAC.providers.traefik | bool | `true` | Adds RBAC rules for the Traefik provider |
| providerRBAC.additionalRules | object | `{}` | Adds additional RBAC rules for other providers |
### Controller ### Controller

View file

@ -258,23 +258,26 @@ rules:
{{- if .Values.providerRBAC.providers.contour }} {{- if .Values.providerRBAC.providers.contour }}
# Access needed when using the Contour provider # Access needed when using the Contour provider
- apiGroups: - apiGroups:
- projectcontour.io - projectcontour.io
resources: resources:
- httpproxies - httpproxies
verbs: verbs:
- get - get
- list - list
- watch - watch
- update - update
{{- end }} {{- end }}
{{- if .Values.providerRBAC.providers.glooPlatform }} {{- if .Values.providerRBAC.providers.glooPlatform }}
# Access needed when using the Gloo Platform provider # Access needed when using the Gloo Platform provider
- apiGroups: - apiGroups:
- networking.gloo.solo.io - networking.gloo.solo.io
resources: resources:
- routetables - routetables
verbs: verbs:
- '*' - '*'
{{- end }}
{{- if .Values.providerRBAC.additionalRules }}
{{ toYaml .Values.providerRBAC.additionalRules }}
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- end }} {{- end }}

View file

@ -273,6 +273,8 @@ providerRBAC:
contour: true contour: true
# -- Adds RBAC rules for the Gloo Platform provider, see `https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-glooplatform/blob/main/README.md` # -- Adds RBAC rules for the Gloo Platform provider, see `https://github.com/argoproj-labs/rollouts-plugin-trafficrouter-glooplatform/blob/main/README.md`
glooPlatform: true glooPlatform: true
# -- Additional RBAC rules for others providers
additionalRules: {}
dashboard: dashboard:
# -- Deploy dashboard server # -- Deploy dashboard server