Added Helm charts for resource watching for qlkube

netgroup-polito · May 27, 2021 · 0c7fad3 · 0c7fad3
1 parent 2b9f080
commit 0c7fad3
Show file tree

Hide file tree

Showing 4 changed files with 40 additions and 0 deletions.
diff --git a/deploy/crownlabs/values.yaml b/deploy/crownlabs/values.yaml
@@ -45,6 +45,7 @@ qlkube:
   replicaCount: 1
   image:
     repository: crownlabs/qlkube
+  rbacResourcesName: crownlabs-qlkube
   ingress:
     hostname: qlkube.crownlabs.example.com
 

diff --git a/qlkube/deploy/qlkube/templates/clusterrole.yaml b/qlkube/deploy/qlkube/templates/clusterrole.yaml
@@ -0,0 +1,23 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Values.rbacResourcesName }}
+  labels: {{- include "qlkube.labels" . | nindent 4 }}
+rules:
+  - apiGroups:
+      - crownlabs.polito.it
+    resources:
+      - instances
+      - instances/status
+      - instancesnapshots
+      - instancesnapshots/status
+      - templates
+      - templates/status
+      - workspaces
+      - workspaces/status
+      - tenants
+      - tenants/status
+    verbs:
+      - get
+      - list
+      - watch
diff --git a/qlkube/deploy/qlkube/templates/clusterrolesbindings.yaml b/qlkube/deploy/qlkube/templates/clusterrolesbindings.yaml
@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ .Values.rbacResourcesName }}
+  labels:
+    {{- include "qlkube.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ .Values.rbacResourcesName }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "qlkube.fullname" . }}
+    namespace: {{ .Release.Namespace }}
diff --git a/qlkube/deploy/qlkube/values.yaml b/qlkube/deploy/qlkube/values.yaml
@@ -46,3 +46,5 @@ resources:
   requests:
     cpu: 100m
     memory: 250Mi
+
+rbacResourcesName: crownlabs-qlkube