argocd-helm/charts/argo-workflows/templates/controller/workflow-role.yaml
Sanjay Tiwari dbd8c20e1f
fix(argo-workflows): RBAC for namespaced workflows (#962)
* Fix to add sa role and rolebinding in case of seperate workflow namespace

* Update Chart version to 0.7.2

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Update Contribution file

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* ADO SignOff

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* ADO SignOff

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Update Chart with change log

Signed-off-by: Sanjay Tiwari <sanjay.180505@gmail.com>

* Restore Contribution.md

Co-authored-by: Vlad Losev <vladlosev@users.noreply.github.com>
2021-10-15 12:41:54 +03:00

29 lines
654 B
YAML

{{- if .Values.workflow.rbac.create -}}
{{- range $namespace := or .Values.singleNamespace false | ternary (append .Values.controller.workflowNamespaces (coalesce .Values.workflow.namespace .Release.Namespace) | uniq) (list "") }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ template "argo-workflows.fullname" $ }}-workflow
{{- with $namespace }}
namespace: {{ . }}
{{- end }}
rules:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- watch
- patch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- watch
{{- end }}
{{- end }}