linkerd2/charts/linkerd2-multicluster/templates/remote-access-service-mirro...

49 lines
1.4 KiB
YAML

{{if .Values.remoteMirrorServiceAccount -}}
{{- $names := .Values.remoteMirrorServiceAccountName -}}
{{- if not (kindIs "slice" .Values.remoteMirrorServiceAccountName) -}}
{{- $names = splitList "," .Values.remoteMirrorServiceAccountName -}}
{{- end -}}
{{- range $names -}}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: {{.}}
namespace: {{$.Values.namespace}}
annotations:
{{$.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" $.Values.linkerdVersion) $.Values.cliVersion}}
rules:
- apiGroups: [""]
resources: ["services"]
verbs: ["list", "get", "watch"]
- apiGroups: [""]
resources: ["configmaps"]
verbs: ["get"]
resourceNames: ["linkerd-config"]
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: {{.}}
namespace: {{$.Values.namespace}}
annotations:
{{$.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" $.Values.linkerdVersion) $.Values.cliVersion}}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: {{.}}
namespace: {{$.Values.namespace}}
annotations:
{{$.Values.createdByAnnotation}}: {{default (printf "linkerd/helm %s" $.Values.linkerdVersion) $.Values.cliVersion}}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{.}}
subjects:
- kind: ServiceAccount
name: {{.}}
namespace: {{$.Values.namespace}}
{{end -}}
{{end -}}