Don't create ClusterRole if disabled

This commit is contained in:
Andrei Pohilko
2023-07-20 14:31:15 +01:00
parent 95f14ed295
commit 5b60263a41

View File

@@ -12,6 +12,7 @@ metadata:
{{- end }} {{- end }}
--- ---
{{- if .Values.serviceAccount.create -}}
kind: ClusterRole kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
metadata: metadata:
@@ -24,6 +25,7 @@ rules:
{{- else }} {{- else }}
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
{{- end }} {{- end }}
{{- end }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
@@ -36,4 +38,4 @@ roleRef:
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
name: {{ include "helm-dashboard.serviceAccountName" . }} name: {{ include "helm-dashboard.serviceAccountName" . }}