Skip to content

Commit

Permalink
fix: add missing role in chart (kyverno#180)
Browse files Browse the repository at this point in the history
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
  • Loading branch information
eddycharly authored Nov 6, 2024
1 parent 8ad25a9 commit 1fe84ce
Show file tree
Hide file tree
Showing 4 changed files with 36 additions and 1 deletion.
18 changes: 18 additions & 0 deletions charts/kyverno-authz-server/templates/cluster-role.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
{{- if .Values.rbac.create -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
metadata:
name: {{ template "kyverno-authz-server.name" . }}
labels:
{{- include "kyverno-authz-server.labels" . | nindent 4 }}
rules:
- apiGroups:
- envoy.kyverno.io
resources:
- authorizationpolicies
verbs:
- get
- list
- watch
{{- end -}}
17 changes: 17 additions & 0 deletions charts/kyverno-authz-server/templates/role-binding.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
{{- if .Values.rbac.create -}}
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: {{ template "kyverno-authz-server.name" . }}
namespace: {{ template "kyverno.lib.namespace" . }}
labels:
{{- include "kyverno-authz-server.labels" . | nindent 4 }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ template "kyverno-authz-server.name" . }}
subjects:
- kind: ServiceAccount
name: {{ template "kyverno-authz-server.service-account.name" . }}
namespace: {{ template "kyverno.lib.namespace" . }}
{{- end -}}
2 changes: 1 addition & 1 deletion charts/kyverno-authz-server/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -207,7 +207,7 @@ containers:
service:

# -- Service port.
port: 80
port: 9081

# -- Service type.
type: ClusterIP
Expand Down

0 comments on commit 1fe84ce

Please sign in to comment.