Add certificates to Role with a flag (#213)

* Added certificates to role with a flag * Fix typo in role.yaml * Fixed line break
fiaas · Nov 17, 2023 · caa8457 · caa8457
1 parent 9e796d6
commit caa8457
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/helm/fiaas-deploy-daemon/templates/_helpers.tpl b/helm/fiaas-deploy-daemon/templates/_helpers.tpl
@@ -27,3 +27,14 @@ app.kubernetes.io/managed-by: {{ .Release.Service }}
 {{ toYaml . }}
 {{- end -}}
 {{- end -}}
+
+{{- define "fiaas-deploy-daemon.RoleCertificateRules" -}}
+- apiGroups:
+  - cert-manager.io/v1
+  resources:
+  - certificates
+  verbs:
+  - get
+  - list
+  - watch
+{{- end -}}
diff --git a/helm/fiaas-deploy-daemon/templates/role.yaml b/helm/fiaas-deploy-daemon/templates/role.yaml
@@ -54,4 +54,7 @@ rules:
   - list
   - update
   - watch
+{{- if .Values.rbac.role.enableCertificates }}
+{{ include "fiaas-deploy-daemon.RoleCertificateRules" . }}
+{{- end }}
 {{- end }}
diff --git a/helm/fiaas-deploy-daemon/values.yaml.tpl b/helm/fiaas-deploy-daemon/values.yaml.tpl
@@ -45,6 +45,7 @@ rbac:
     create: true
     labels: {}
     annotations: {}
+    enableCertificates: false
   roleBinding:
     create: true
     labels: {}