0e3251bea8
- the "extra" key has been deprecated a long time ago - the dashboard is outdated and there's a replacement with kube-prometheus-stack and #439
70 lines
2.1 KiB
YAML
70 lines
2.1 KiB
YAML
#
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
|
|
{{- if .Values.components.functions }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
{{- if .Values.functions.rbac.limit_to_namespace }}
|
|
kind: Role
|
|
metadata:
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}-role"
|
|
{{- else}}
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}"
|
|
{{- end}}
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources:
|
|
- services
|
|
- configmaps
|
|
- pods
|
|
verbs:
|
|
- '*'
|
|
- apiGroups:
|
|
- apps
|
|
resources:
|
|
- statefulsets
|
|
verbs:
|
|
- '*'
|
|
---
|
|
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
{{- if .Values.functions.rbac.limit_to_namespace }}
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}-rolebinding"
|
|
{{- else}}
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}"
|
|
{{- end}}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
{{- if .Values.functions.rbac.limit_to_namespace }}
|
|
kind: Role
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}-role"
|
|
{{- else}}
|
|
kind: ClusterRole
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}"
|
|
{{- end}}
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: "{{ template "pulsar.fullname" . }}-{{ .Values.functions.component }}"
|
|
namespace: {{ template "pulsar.namespace" . }}
|
|
{{- end }} |