b029a6dde3
* feat(argo-rollouts): Add flag to optionally disable the creation of cluster roles (even when running in cluster mode) Signed-off-by: Joshua Helton <jdoghelton@gmail.com> * fix README.md with helm-docs.sh Signed-off-by: Joshua Helton <jdoghelton@gmail.com> Signed-off-by: Joshua Helton <jdoghelton@gmail.com> Co-authored-by: JM <jmeridth@gmail.com>
84 lines
1.8 KiB
YAML
84 lines
1.8 KiB
YAML
{{- if and .Values.clusterInstall .Values.createClusterAggregateRoles }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "argo-rollouts.fullname" . }}-aggregate-to-view
|
|
labels:
|
|
rbac.authorization.k8s.io/aggregate-to-view: "true"
|
|
app.kubernetes.io/component: {{ .Values.controller.component }}
|
|
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- rollouts
|
|
- rollouts/scale
|
|
- experiments
|
|
- analysistemplates
|
|
- clusteranalysistemplates
|
|
- analysisruns
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "argo-rollouts.fullname" . }}-aggregate-to-edit
|
|
labels:
|
|
rbac.authorization.k8s.io/aggregate-to-edit: "true"
|
|
app.kubernetes.io/component: {{ .Values.controller.component }}
|
|
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- rollouts
|
|
- rollouts/scale
|
|
- rollouts/status
|
|
- experiments
|
|
- analysistemplates
|
|
- clusteranalysistemplates
|
|
- analysisruns
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: {{ include "argo-rollouts.fullname" . }}-aggregate-to-admin
|
|
labels:
|
|
rbac.authorization.k8s.io/aggregate-to-admin: "true"
|
|
app.kubernetes.io/component: {{ .Values.controller.component }}
|
|
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- rollouts
|
|
- rollouts/scale
|
|
- rollouts/status
|
|
- experiments
|
|
- analysistemplates
|
|
- clusteranalysistemplates
|
|
- analysisruns
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- deletecollection
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
{{- end }}
|