argocd-helm/charts/argocd-image-updater/templates/rbac.yaml
Wylie Hobbs 879453808c
feat(argo-cd): Add argocd image updater (#477)
* Add argocd-image-updater chart

Signed-off-by: Wylie Hobbs <wylie-hobbs@pluralsight.com>

* Add maintainers

Signed-off-by: Wylie Hobbs <wylie-hobbs@pluralsight.com>

* update rbac and chart metadata

Signed-off-by: Wylie Hobbs <wylie@wyliehobbs.com>

* fix chompstyle

Signed-off-by: Wylie Hobbs <wylie@wyliehobbs.com>

* add README/template with helm-docs

Signed-off-by: Wylie Hobbs <wylie@wyliehobbs.com>

* Use correct icon url and use a generic maintainer section

Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>

Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
2021-08-16 17:23:02 +02:00

48 lines
1,004 B
YAML

{{- if .Values.rbac.enabled }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
labels:
{{ include "argocd-image-updater.labels" . | nindent 4 }}
name: {{ include "argocd-image-updater.fullname" . }}
rules:
- apiGroups:
- ''
resources:
- secrets
- configmaps
verbs:
- get
- list
- watch
- apiGroups:
- argoproj.io
resources:
- applications
verbs:
- get
- list
- update
- patch
- apiGroups:
- ""
resources:
- events
verbs:
- create
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
{{ include "argocd-image-updater.labels" . | nindent 4 }}
name: {{ include "argocd-image-updater.fullname" . }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ include "argocd-image-updater.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ include "argocd-image-updater.serviceAccountName" . }}
{{- end }}