[bitnami/vault] Add ability to modify or extend the vault sever RBAC roles (#35774)

bitnami/vault/CHANGELOG.md

@@ -1,8 +1,12 @@
 # Changelog
 
-## 1.7.25 (2025-08-07)
+## 1.8.0 (2025-08-13)
 
-* [bitnami/vault] :zap: :arrow_up: Update dependency references ([#35636](https://github.com/bitnami/charts/pull/35636))
+* [bitnami/vault] Add ability to modify or extend the vault sever RBAC roles ([#35774](https://github.com/bitnami/charts/pull/35774))
+
+## <small>1.7.25 (2025-08-07)</small>
+
+* [bitnami/vault] :zap: :arrow_up: Update dependency references (#35636) ([ae931de](https://github.com/bitnami/charts/commit/ae931dee0f8acfd1c32a96687d257ec32b04620a)), closes [#35636](https://github.com/bitnami/charts/issues/35636)
 
 ## <small>1.7.24 (2025-08-07)</small>
 

bitnami/vault/Chart.yaml

@@ -37,4 +37,4 @@ maintainers:
 name: vault
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/vault
-version: 1.7.25
+version: 1.8.0

bitnami/vault/README.md

@@ -372,6 +372,8 @@ The [Bitnami vault](https://github.com/bitnami/containers/tree/main/bitnami/vaul
 | Name                                                 | Description                                                      | Value   |
 | ---------------------------------------------------- | ---------------------------------------------------------------- | ------- |
 | `server.rbac.create`                                 | Specifies whether RBAC resources should be created               | `true`  |
+| `server.rbac.leaderElection.rules`                   | Specifies the leader election role rules                         | `[]`    |
+| `server.rbac.discovery.rules`                        | Specifies the discovery role rules                               | `[]`    |
 | `server.serviceAccount.create`                       | Specifies whether a ServiceAccount should be created             | `true`  |
 | `server.serviceAccount.name`                         | The name of the ServiceAccount to use.                           | `""`    |
 | `server.serviceAccount.annotations`                  | Additional Service Account annotations (evaluated as a template) | `{}`    |

bitnami/vault/templates/server/roles.yaml

@@ -16,44 +16,7 @@ metadata:
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - configmaps
-    verbs:
-      - get
-      - list
-      - watch
-      - create
-      - update
-      - patch
-      - delete
-  - apiGroups:
-      - ""
-    resources:
-      - configmaps/status
-    verbs:
-      - get
-      - update
-      - patch
-  - apiGroups:
-      - ""
-    resources:
-      - events
-    verbs:
-      - create
-  - apiGroups:
-      - "coordination.k8s.io"
-    resources:
-      - leases
-    verbs:
-      - get
-      - list
-      - watch
-      - create
-      - update
-      - patch
-      - delete
+  {{- include "common.tplvalues.render" (dict "value" .Values.server.rbac.leaderElection.rules "context" $) | nindent 2 }}
 ---
 kind: Role
 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
@@ -67,7 +30,5 @@ metadata:
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 rules:
-  - apiGroups: [""]
-    resources: ["pods"]
-    verbs: ["get", "watch", "list", "update", "patch"]
+  {{- include "common.tplvalues.render" (dict "value" .Values.server.rbac.discovery.rules "context" $) | nindent 2 }}
 {{- end }}

bitnami/vault/values.yaml

@@ -682,6 +682,82 @@ server:
     ## @param server.rbac.create Specifies whether RBAC resources should be created
     ##
     create: true
+
+    leaderElection:
+      ## @param server.rbac.leaderElection.rules [array] Specifies the leader election role rules
+      ## Example:
+      ## rules:
+      ##   - apiGroups:
+      ##       - ""
+      ##     resources:
+      ##       - pods
+      ##     verbs:
+      ##       - get
+      ##       - list
+      ##
+      rules:
+        - apiGroups:
+            - ""
+          resources:
+            - configmaps
+          verbs:
+            - get
+            - list
+            - watch
+            - create
+            - update
+            - patch
+            - delete
+        - apiGroups:
+            - ""
+          resources:
+            - configmaps/status
+          verbs:
+            - get
+            - update
+            - patch
+        - apiGroups:
+            - ""
+          resources:
+            - events
+          verbs:
+            - create
+        - apiGroups:
+            - "coordination.k8s.io"
+          resources:
+            - leases
+          verbs:
+            - get
+            - list
+            - watch
+            - create
+            - update
+            - patch
+            - delete
+
+    discovery:
+      ## @param server.rbac.discovery.rules [array] Specifies the discovery role rules
+      ## Example:
+      ## rules:
+      ##   - apiGroups:
+      ##       - ""
+      ##     resources:
+      ##       - pods
+      ##     verbs:
+      ##       - get
+      ##       - list
+      ##
+      rules:
+        - apiGroups:
+            - ""
+          resources:
+            - pods
+          verbs:
+            - get
+            - watch
+            - list
+            - update
+            - patch
   ## ServiceAccount configuration
   ##
   serviceAccount: