update rbac and chart metadata

Signed-off-by: Wylie Hobbs <wylie@wyliehobbs.com>
This commit is contained in:
Wylie Hobbs 2021-08-12 17:22:22 -06:00
parent 32a9658f11
commit cddd4941ce
4 changed files with 35 additions and 10 deletions

View file

@ -3,7 +3,7 @@ name: argocd-image-updater
description: A Helm chart for Argo CD Image Updater, a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD description: A Helm chart for Argo CD Image Updater, a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD
type: application type: application
version: 0.1.0 version: 0.1.0
appVersion: 0.7.0 appVersion: v0.10.1
home: https://github.com/argoproj-labs/argocd-image-updater home: https://github.com/argoproj-labs/argocd-image-updater
icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png
keywords: keywords:
@ -14,3 +14,6 @@ maintainers:
- name: alexec - name: alexec
- name: alexmt - name: alexmt
- name: jessesuen - name: jessesuen
annotations:
artifacthub.io/changes: |
- "[Added]: First chart release"

View file

@ -9,5 +9,5 @@ data:
registries.conf: | registries.conf: |
{{ with .Values.config.registries }} {{ with .Values.config.registries }}
registries: registries:
{{ toYaml . | nindent 6 }} {{- toYaml . | nindent 6 }}
{{- end }} {{- end }}

View file

@ -1,3 +1,4 @@
{{- if .Values.rbac.enabled }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: Role kind: Role
@ -6,14 +7,30 @@ metadata:
{{ include "argocd-image-updater.labels" . | nindent 4 }} {{ include "argocd-image-updater.labels" . | nindent 4 }}
name: {{ include "argocd-image-updater.fullname" . }} name: {{ include "argocd-image-updater.fullname" . }}
rules: rules:
- apiGroups: - apiGroups:
- "" - ''
resources: resources:
- secrets - secrets
verbs: - configmaps
- get verbs:
- list - get
- watch - list
- watch
- apiGroups:
- argoproj.io
resources:
- applications
verbs:
- get
- list
- update
- patch
- apiGroups:
- ""
resources:
- events
verbs:
- create
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
@ -28,3 +45,4 @@ roleRef:
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ include "argocd-image-updater.serviceAccountName" . }} name: {{ include "argocd-image-updater.serviceAccountName" . }}
{{- end }}

View file

@ -69,6 +69,10 @@ securityContext: {}
# runAsNonRoot: true # runAsNonRoot: true
# runAsUser: 1000 # runAsUser: 1000
# Enable RBAC creation
rbac:
enabled: true
resources: {} resources: {}
nodeSelector: {} nodeSelector: {}