Handle no service account for repo-server

This commit is contained in:
Antoine Dubois 2019-11-07 16:03:28 +01:00
parent 1b133ca492
commit 7c811cc640
5 changed files with 25 additions and 15 deletions

View file

@ -105,7 +105,9 @@ spec:
affinity:
{{- toYaml .Values.repoServer.affinity | nindent 8 }}
{{- end }}
{{- if .Values.repoServer.serviceAccount.create }}
serviceAccountName: {{ template "argo-cd.repoServerServiceAccountName" . }}
{{- end }}
volumes:
{{- if .Values.repoServer.volumes }}
{{- toYaml .Values.repoServer.volumes | nindent 8}}

View file

@ -1,3 +1,4 @@
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
@ -13,3 +14,4 @@ rules:
{{- if .Values.repoServer.rbac }}
{{toYaml .Values.repoServer.rbac }}
{{- end }}
{{- end }}

View file

@ -1,3 +1,4 @@
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
@ -16,4 +17,5 @@ roleRef:
subjects:
- kind: ServiceAccount
name: {{ template "argo-cd.repoServerServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ .Release.Namespace }}
{{- end }}

View file

@ -1,3 +1,4 @@
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
metadata:
@ -8,4 +9,5 @@ metadata:
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
app.kubernetes.io/part-of: argocd
app.kubernetes.io/component: {{ .Values.repoServer.name }}
app.kubernetes.io/component: {{ .Values.repoServer.name }}
{{- end }}

View file

@ -478,21 +478,23 @@ repoServer:
# namespace: monitoring
# additionalLabels: {}
## Repo server service account
## If create is set to true, make sure to uncomment the name and update the rbac section below
serviceAccount:
create: true
name: argocd-repo-server
create: false
# name: argocd-repo-server
## Repo server rbac rules
#rbac:
#- apiGroups:
# - argoproj.io
# resources:
# - applications
# verbs:
# - get
# - list
# - watch
# rbac:
# - apiGroups:
# - argoproj.io
# resources:
# - applications
# verbs:
# - get
# - list
# - watch
## Argo Configs
configs:
knownHosts: