chore: renaming sar rbac templates

Signed-off-by: Ievgenii Shepeliuk <[email protected]>
open-policy-agent · Jun 1, 2022 · 1dc2a83 · 1dc2a83
1 parent 177dc0d
commit 1dc2a83
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 19 deletions.
diff --git a/...gmt/templates/sar-clusterrolebinding.yaml → charts/opa-kube-mgmt/templates/rbac-sar.yaml b/...gmt/templates/sar-clusterrolebinding.yaml → charts/opa-kube-mgmt/templates/rbac-sar.yaml
@@ -1,4 +1,23 @@
 {{- if (and .Values.rbac.create .Values.sar.enabled) -}}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app: {{ template "opa.name" . }}
+    chart: {{ template "opa.chart" . }}
+    heritage: {{ .Release.Service }}
+    release: {{ .Release.Name }}
+    component: sar
+  name: {{ template "opa.sarfullname" . }}
+rules:
+  - apiGroups:
+      - "authorization.k8s.io"
+    resources:
+    - subjectaccessreviews
+    verbs:
+    - create
+---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:

diff --git a/charts/opa-kube-mgmt/templates/sar-clusterrole.yaml b/charts/opa-kube-mgmt/templates/sar-clusterrole.yaml