Giter VIP home page Giter VIP logo

Comments (4)

onedr0p avatar onedr0p commented on May 30, 2024

Please provide more information and an example helm values of what you would like to see.

from helm-charts.

djessich avatar djessich commented on May 30, 2024

Example manifest:

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: diun
rules:
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - get
      - watch
      - list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: diun
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: diun
subjects:
  - kind: ServiceAccount
    name: diun
    namespace: diun

Helm config for above:

rbac:
  main:
    enabled: true
    clusterRoleLabels: {}
    clusterRoleAnnotations: {}
    clusterRoleBindingLabels: {}
    clusterRoleBindingAnnotations: {}
    rules:
      apiGroups:
        - ''
      resources:
        - pods
      verbs:
        - get
        - watch
        - list
    # automatically created from serviceAccountName
    #    serviceAccountName:
    # Add subjects to the ClusterRoleBinding. Includes the above created serviceAccount
    #   subjects: {}

For reference see TrueCharts library-chart, how this could be done.

from helm-charts.

bjw-s avatar bjw-s commented on May 30, 2024

It was never really a matter of me not knowing how to implement it, but rather a conscious choice not doing so.

The applications that typically rely on this library (even in the k8s-at-home days) never really needed Kubernetes API access, so it didn't really make sense to add an almost 1:1 mapping from values.yaml to an RBAC manifest file that can also easily be included as a sidecar file if required.

from helm-charts.

onedr0p avatar onedr0p commented on May 30, 2024

I agreed we wouldn't want to support this as it can easily be defined outside the Helm Chart and isn't a very common need to embedded in the library.

from helm-charts.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.