| Giorgi Lekveishvili | b38f736 | 2023-06-05 13:36:02 +0400 | [diff] [blame] | 1 | {{- if .Values.serviceAccount.create -}} |
| 2 | --- |
| 3 | apiVersion: v1 |
| 4 | kind: ServiceAccount |
| 5 | metadata: |
| 6 | name: {{ .Values.serviceAccount.controller }} |
| 7 | namespace: {{ .Release.Namespace }} |
| 8 | {{ include "smb.labels" . | indent 2 }} |
| 9 | --- |
| 10 | apiVersion: v1 |
| 11 | kind: ServiceAccount |
| 12 | metadata: |
| 13 | name: {{ .Values.serviceAccount.node }} |
| 14 | namespace: {{ .Release.Namespace }} |
| 15 | {{ include "smb.labels" . | indent 2 }} |
| 16 | {{ end }} |
| 17 | |
| 18 | {{- if .Values.rbac.create -}} |
| 19 | --- |
| 20 | apiVersion: rbac.authorization.k8s.io/v1 |
| 21 | kind: ClusterRole |
| 22 | metadata: |
| 23 | name: {{ .Values.rbac.name }}-external-provisioner-role |
| 24 | {{ include "smb.labels" . | indent 2 }} |
| 25 | rules: |
| 26 | - apiGroups: [""] |
| 27 | resources: ["persistentvolumes"] |
| 28 | verbs: ["get", "list", "watch", "create", "delete"] |
| 29 | - apiGroups: [""] |
| 30 | resources: ["persistentvolumeclaims"] |
| 31 | verbs: ["get", "list", "watch", "update"] |
| 32 | - apiGroups: ["storage.k8s.io"] |
| 33 | resources: ["storageclasses"] |
| 34 | verbs: ["get", "list", "watch"] |
| 35 | - apiGroups: [""] |
| 36 | resources: ["events"] |
| 37 | verbs: ["get", "list", "watch", "create", "update", "patch"] |
| 38 | - apiGroups: ["storage.k8s.io"] |
| 39 | resources: ["csinodes"] |
| 40 | verbs: ["get", "list", "watch"] |
| 41 | - apiGroups: [""] |
| 42 | resources: ["nodes"] |
| 43 | verbs: ["get", "list", "watch"] |
| 44 | - apiGroups: ["coordination.k8s.io"] |
| 45 | resources: ["leases"] |
| 46 | verbs: ["get", "list", "watch", "create", "update", "patch"] |
| 47 | - apiGroups: [""] |
| 48 | resources: ["secrets"] |
| 49 | verbs: ["get"] |
| 50 | --- |
| 51 | |
| 52 | kind: ClusterRoleBinding |
| 53 | apiVersion: rbac.authorization.k8s.io/v1 |
| 54 | metadata: |
| 55 | name: {{ .Values.rbac.name }}-csi-provisioner-binding |
| 56 | {{ include "smb.labels" . | indent 2 }} |
| 57 | subjects: |
| 58 | - kind: ServiceAccount |
| 59 | name: {{ .Values.serviceAccount.controller }} |
| 60 | namespace: {{ .Release.Namespace }} |
| 61 | roleRef: |
| 62 | kind: ClusterRole |
| 63 | name: {{ .Values.rbac.name }}-external-provisioner-role |
| 64 | apiGroup: rbac.authorization.k8s.io |
| 65 | {{ end }} |