From cddd4941ce656b59dd144ae829d62eaeaffdb057 Mon Sep 17 00:00:00 2001 From: Wylie Hobbs Date: Thu, 12 Aug 2021 17:22:22 -0600 Subject: [PATCH] update rbac and chart metadata Signed-off-by: Wylie Hobbs --- charts/argocd-image-updater/Chart.yaml | 5 ++- .../templates/configmap.yaml | 2 +- .../argocd-image-updater/templates/rbac.yaml | 34 ++++++++++++++----- charts/argocd-image-updater/values.yaml | 4 +++ 4 files changed, 35 insertions(+), 10 deletions(-) diff --git a/charts/argocd-image-updater/Chart.yaml b/charts/argocd-image-updater/Chart.yaml index 8018107c..4288ee9d 100644 --- a/charts/argocd-image-updater/Chart.yaml +++ b/charts/argocd-image-updater/Chart.yaml @@ -3,7 +3,7 @@ name: argocd-image-updater description: A Helm chart for Argo CD Image Updater, a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD type: application version: 0.1.0 -appVersion: 0.7.0 +appVersion: v0.10.1 home: https://github.com/argoproj-labs/argocd-image-updater icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png keywords: @@ -14,3 +14,6 @@ maintainers: - name: alexec - name: alexmt - name: jessesuen +annotations: + artifacthub.io/changes: | + - "[Added]: First chart release" diff --git a/charts/argocd-image-updater/templates/configmap.yaml b/charts/argocd-image-updater/templates/configmap.yaml index 3f5a68ca..5a355757 100644 --- a/charts/argocd-image-updater/templates/configmap.yaml +++ b/charts/argocd-image-updater/templates/configmap.yaml @@ -9,5 +9,5 @@ data: registries.conf: | {{ with .Values.config.registries }} registries: - {{ toYaml . | nindent 6 }} + {{- toYaml . | nindent 6 }} {{- end }} diff --git a/charts/argocd-image-updater/templates/rbac.yaml b/charts/argocd-image-updater/templates/rbac.yaml index 3ff64017..cb508a43 100644 --- a/charts/argocd-image-updater/templates/rbac.yaml +++ b/charts/argocd-image-updater/templates/rbac.yaml @@ -1,3 +1,4 @@ +{{- if .Values.rbac.enabled }} --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role @@ -6,14 +7,30 @@ metadata: {{ include "argocd-image-updater.labels" . | nindent 4 }} name: {{ include "argocd-image-updater.fullname" . }} rules: -- apiGroups: - - "" - resources: - - secrets - verbs: - - get - - list - - watch + - apiGroups: + - '' + resources: + - secrets + - configmaps + verbs: + - get + - list + - watch + - apiGroups: + - argoproj.io + resources: + - applications + verbs: + - get + - list + - update + - patch + - apiGroups: + - "" + resources: + - events + verbs: + - create --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding @@ -28,3 +45,4 @@ roleRef: subjects: - kind: ServiceAccount name: {{ include "argocd-image-updater.serviceAccountName" . }} +{{- end }} diff --git a/charts/argocd-image-updater/values.yaml b/charts/argocd-image-updater/values.yaml index f05d64fe..b5254a08 100644 --- a/charts/argocd-image-updater/values.yaml +++ b/charts/argocd-image-updater/values.yaml @@ -69,6 +69,10 @@ securityContext: {} # runAsNonRoot: true # runAsUser: 1000 +# Enable RBAC creation +rbac: + enabled: true + resources: {} nodeSelector: {}