gitops-runtime-helm/charts/gitops-runtime/templates/_components/gitops-operator/promotion-template/_rbac.yaml at d888cb752b81efcec60651fb2a1fbf86cabae3d0 · codefresh-io/gitops-runtime-helm · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

{{- define "gitops-operator.resources.promotion-template-rbac" }}
apiVersion: rbac.authorization.k8s.io/v1
kind: {{ .Values.global.runtime.singleNamespace | ternary "Role" "ClusterRole" }}
metadata:
  labels:
    {{- include "gitops-operator.selectorLabels" . | nindent 4 }}
  name: promotion-template
rules:
- apiGroups:
  - ""
  resources:
  - pods
  verbs:
  - patch
- apiGroups:
  - ""
  resources:
  - secrets
  verbs:
  - get
- apiGroups:
  - argoproj.io
  resources:
  - workflows
  verbs:
  - create
  - get
  - list
  - patch
  - watch
- apiGroups:
  - argoproj.io
  resources:
  - workflowtemplates
  verbs:
  - get
- apiGroups:
  - argoproj.io
  resources:
  - workflowtaskresults
  verbs:
  - create
  - patch

---
apiVersion: rbac.authorization.k8s.io/v1
kind: {{ .Values.global.runtime.singleNamespace | ternary "RoleBinding" "ClusterRoleBinding" }}
metadata:
  labels:
    {{- include "gitops-operator.selectorLabels" . | nindent 4 }}
  name: promotion-template
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: {{ .Values.global.runtime.singleNamespace | ternary "Role" "ClusterRole" }}
  name: promotion-template
subjects:
- kind: ServiceAccount
  name: {{ include "gitops-operator.promotionTemplate.serviceAccountName" . }}
  namespace: {{ .Release.Namespace }}
{{- end }}