Merge pull request #1 from octoenergy/nessex-disable-rbac-creation

Toggle for ClusterRole and ClusterRoleBinding
octoenergy · Dec 3, 2024 · 912572b · 912572b
2 parents 1493025 + 298f9ae
commit 912572b
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 0 deletions.
diff --git a/charts/vantage-kubernetes-agent/templates/clusterrole.yaml b/charts/vantage-kubernetes-agent/templates/clusterrole.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.clusterRole.create  }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -45,3 +46,4 @@ rules:
   - "rollouts"
   verbs: ["get", "watch", "list"]
 {{- end}}
+{{- end}}
diff --git a/charts/vantage-kubernetes-agent/templates/clusterrolebinding.yaml b/charts/vantage-kubernetes-agent/templates/clusterrolebinding.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.clusterRoleBinding.create  }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -16,3 +17,4 @@ roleRef:
   kind: ClusterRole
   name: {{ include "vantage-kubernetes-agent.fullname" . }}
   apiGroup: rbac.authorization.k8s.io
+{{- end}}
diff --git a/charts/vantage-kubernetes-agent/values.schema.json b/charts/vantage-kubernetes-agent/values.schema.json
@@ -82,6 +82,9 @@
             "properties": {
                 "annotations": {
                     "type": "object"
+                },
+                "create": {
+                  "type": "boolean"
                 }
             }
         },
@@ -90,6 +93,9 @@
             "properties": {
                 "annotations": {
                     "type": "object"
+                },
+                "create": {
+                  "type": "boolean"
                 }
             }
         },

diff --git a/charts/vantage-kubernetes-agent/values.yaml b/charts/vantage-kubernetes-agent/values.yaml
@@ -106,8 +106,10 @@ serviceAccount:
   name: ""
 
 clusterRole:
+  create: true
   annotations: {}
 clusterRoleBinding:
+  create: true
   annotations: {}
 
 appLabels: {}