From 5b60263a411ed2ad3c4b21299c8db6cdd598779c Mon Sep 17 00:00:00 2001
From: Andrei Pohilko <andrei.pokhilko@gmail.com>
Date: Thu, 20 Jul 2023 14:31:15 +0100
Subject: [PATCH] Don't create ClusterRole if disabled

---
 charts/helm-dashboard/templates/serviceaccount.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/charts/helm-dashboard/templates/serviceaccount.yaml b/charts/helm-dashboard/templates/serviceaccount.yaml
index be8d27d..6a8869b 100644
--- a/charts/helm-dashboard/templates/serviceaccount.yaml
+++ b/charts/helm-dashboard/templates/serviceaccount.yaml
@@ -12,6 +12,7 @@ metadata:
 {{- end }}
 
 ---
+{{- if .Values.serviceAccount.create -}}
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -24,6 +25,7 @@ rules:
   {{- else }}
     verbs: ["get", "list", "watch"]
   {{- end }}
+{{- end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -36,4 +38,4 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     namespace: {{ .Release.Namespace }}
-    name: {{ include "helm-dashboard.serviceAccountName" . }}
\ No newline at end of file
+    name: {{ include "helm-dashboard.serviceAccountName" . }}