argocd-helm/charts/argo-workflows/templates/controller/workflow-rb.yaml
Sanjay Tiwari dbd8c20e1f
fix(argo-workflows): RBAC for namespaced workflows (#962)
* Fix to add sa role and rolebinding in case of seperate workflow namespace

* Update Chart version to 0.7.2

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Update Contribution file

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* ADO SignOff

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* ADO SignOff

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Update Chart with change log

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Restore Contribution.md

Co-authored-by: Vlad Losev <vladlosev@users.noreply.github.com>
2021-10-15 12:41:54 +03:00

20 lines
694 B
YAML

{{- if .Values.workflow.rbac.create -}}
{{- range $namespace := or .Values.singleNamespace false | ternary (append .Values.controller.workflowNamespaces (coalesce .Values.workflow.namespace .Release.Namespace) | uniq) (list "") }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ template "argo-workflows.fullname" $ }}-workflow
namespace: {{ $namespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ template "argo-workflows.fullname" $ }}-workflow
subjects:
- kind: ServiceAccount
name: {{ $.Values.workflow.serviceAccount.name }}
{{- with $namespace }}
namespace: {{ . }}
{{- end }}
{{- end }}
{{- end }}