argocd-helm/charts/argo-events/templates/argo-events-roles.yaml
Paul Ayling 6ff8ee14f5
feat(argo-events): Update Argo Events to 1.5.0 (#995)
* Update image and tag for argo events deployments

Signed-off-by: Paul Ayling <paul.ayling@sky.uk>

* Update Nats images

Signed-off-by: Paul Ayling <paul.ayling@sky.uk>

* Update sensorImage and eventSourceImage

Signed-off-by: Paul Ayling <paul.ayling@sky.uk>

* Update Chart.yaml

Signed-off-by: Paul Ayling <paul.ayling@sky.uk>

* Place new argument at end to work with old images

Signed-off-by: Paul Ayling <paul.ayling@sky.uk>

* Update chart appversion and RBAC

Signed-off-by: Paul Ayling <paulayling.dev@gmail.com>

* Apply suggestions from code review

Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Signed-off-by: Paul Ayling <paulayling.dev@gmail.com>

* Default to Chart AppVersion if tag does not exist

Signed-off-by: Paul Ayling <paulayling.dev@gmail.com>

* Update Chart AppVersion to v1.5.0

Signed-off-by: Paul Ayling <paulayling.dev@gmail.com>

* Update changelog

Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>

Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
2021-10-27 17:13:40 +02:00

84 lines
1.7 KiB
YAML

{{- if .Values.singleNamespace }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: argo-events-binding
namespace: {{ .Release.Namespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: argo-events-role
subjects:
- kind: ServiceAccount
name: {{ .Values.serviceAccount }}
namespace: {{ .Release.Namespace }}
{{- if .Values.additionalSaNamespaces }}
{{ $sa := .Values.serviceAccount }}
{{- range $namespace := .Values.additionalSaNamespaces }}
- kind: ServiceAccount
name: {{ $sa }}
namespace: {{ $namespace }}
{{- end }}
{{- end }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: argo-events-role
namespace: {{ .Release.Namespace }}
rules:
{{- with .Values.additionalServiceAccountRules }}
{{- toYaml . | nindent 2 }}
{{- end }}
- apiGroups:
- argoproj.io
verbs:
- create
- delete
- deletecollection
- get
- list
- patch
- update
- watch
resources:
- sensors
- sensors/finalizers
- sensors/status
- eventsources
- eventsources/finalizers
- eventsources/status
- eventbus
- eventbus/finalizers
- eventbus/status
- apiGroups:
- ""
resources:
- pods
- pods/exec
- configmaps
- secrets
- services
- persistentvolumeclaims
verbs:
- create
- get
- list
- watch
- update
- patch
- delete
- apiGroups:
- "apps"
resources:
- deployments
- statefulsets
verbs:
- create
- get
- list
- watch
- update
- patch
- delete
{{- end }}