use app and worker service accounts in role binding

Signed-off-by: Pascal Sthamer <10992664+P4sca1@users.noreply.github.com>
2025-02-19 12:36:47 +01:00
parent 2edd3be85f
commit af2d58155c
8 changed files with 2 additions and 6 deletions
@@ -0,0 +1,18 @@
+{{ if .Values.app.rbac.create }}
+kind: RoleBinding
+apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
+metadata:
+  name: {{ template "shuffle.app.name" . }}
+  namespace: {{ include "common.names.namespace" . | quote }}
+  labels: {{- include "shuffle.app.labels" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
+  {{- if .Values.commonAnnotations }}
+  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
+  {{- end }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "shuffle.app.serviceAccountName" . }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ template "shuffle.app.name" . }}
+{{- end }}