feat(helm): add option to disable rbac (#91)

Signed-off-by: Hy3n4 <[email protected]>
oskoperator · Mar 20, 2024 · 3a7cf79 · 3a7cf79
1 parent 0263c95
commit 3a7cf79
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/helm/osko/templates/cluster-role-binding.yaml b/helm/osko/templates/cluster-role-binding.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.create -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -12,3 +13,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "osko.fullname" . }}
     namespace: {{ .Release.Namespace }}
+{{- end }}
diff --git a/helm/osko/templates/cluster-role.yaml b/helm/osko/templates/cluster-role.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.create -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -218,3 +219,4 @@ rules:
       - get
       - patch
       - update
+  {{- end }}
diff --git a/helm/osko/values.yaml b/helm/osko/values.yaml
@@ -27,6 +27,9 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
+rbac:
+  create: true
+
 podAnnotations: {}
 
 securityContext: