* Fixes #173 Support both Role Binding and Cluster Role Binding depending on rbac.limit_to_namespace * Rev version * Get Role/Cluster the right way around
This commit is contained in:
parent
617308147d
commit
1956a870ff
@ -21,7 +21,7 @@ apiVersion: v1
|
|||||||
appVersion: "2.7.2"
|
appVersion: "2.7.2"
|
||||||
description: Apache Pulsar Helm chart for Kubernetes
|
description: Apache Pulsar Helm chart for Kubernetes
|
||||||
name: pulsar
|
name: pulsar
|
||||||
version: 2.7.4
|
version: 2.7.5
|
||||||
home: https://pulsar.apache.org
|
home: https://pulsar.apache.org
|
||||||
sources:
|
sources:
|
||||||
- https://github.com/apache/pulsar
|
- https://github.com/apache/pulsar
|
||||||
|
|||||||
@ -22,17 +22,24 @@
|
|||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
{{- if .Values.rbac.limit_to_namespace }}
|
{{- if .Values.rbac.limit_to_namespace }}
|
||||||
kind: RoleBinding
|
kind: RoleBinding
|
||||||
|
metadata:
|
||||||
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-rolebinding"
|
||||||
{{- else}}
|
{{- else}}
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
{{- end}}
|
|
||||||
metadata:
|
metadata:
|
||||||
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrolebinding"
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrolebinding"
|
||||||
|
{{- end}}
|
||||||
labels:
|
labels:
|
||||||
{{- include "pulsar.standardLabels" . | nindent 4 }}
|
{{- include "pulsar.standardLabels" . | nindent 4 }}
|
||||||
roleRef:
|
roleRef:
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
{{- if .Values.rbac.limit_to_namespace }}
|
||||||
|
kind: Role
|
||||||
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-role"
|
||||||
|
{{- else}}
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrole"
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrole"
|
||||||
|
{{- end}}
|
||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-acct"
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-acct"
|
||||||
@ -40,9 +47,15 @@ subjects:
|
|||||||
---
|
---
|
||||||
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
{{- if .Values.rbac.limit_to_namespace }}
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-role"
|
||||||
|
{{- else}}
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrole"
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.broker.component }}-clusterrole"
|
||||||
|
{{- end}}
|
||||||
labels:
|
labels:
|
||||||
{{- include "pulsar.standardLabels" . | nindent 4 }}
|
{{- include "pulsar.standardLabels" . | nindent 4 }}
|
||||||
rules:
|
rules:
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user