feat(helm): more roles

Signed-off-by: Hy3n4 <[email protected]>
oskoperator · Nov 6, 2023 · 30e00ff · 30e00ff
1 parent 32cdd30
commit 30e00ff
Show file tree

Hide file tree

Showing 4 changed files with 34 additions and 2 deletions.
diff --git a/helm/osko/templates/cluster-role.yaml b/helm/osko/templates/cluster-role.yaml
@@ -1,4 +1,3 @@
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:

diff --git a/helm/osko/templates/leader_election_role.yaml b/helm/osko/templates/leader_election_role.yaml
@@ -1,4 +1,3 @@
-# permissions to do leader election.
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:

diff --git a/helm/osko/templates/prometheusrule_editor_role.yaml b/helm/osko/templates/prometheusrule_editor_role.yaml
@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    {{ include "osko.labels" . | nindent 4 }}
+  name: prometheus-rule-editor-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ .Release.Name }}-prometheusrule-editor-role
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "osko.fullname" . }}
+    namespace: {{ .Release.Namespace }}
diff --git a/helm/osko/templates/prometheusrule_editor_role_binding.yaml b/helm/osko/templates/prometheusrule_editor_role_binding.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    {{ include "osko.labels" . | nindent 4 }}
+  name: {{ .Release.Name }}-prometheusrule-editor-role
+rules:
+- apiGroups:
+    - monitoring.coreos.com
+  resources:
+    - prometheusrules
+  verbs:
+    - get
+    - list
+    - watch
+    - create
+    - update
+    - patch
+    - delete