Files
charts/bitnami/concourse/templates/web/rolebinding.yaml
Carlos Rodríguez Hernández 26502141d1 [bitnami/*] Unify k8s directives separators (#10185)
* [bitnami/*] Unify k8s directives separators

Signed-off-by: Carlos Rodriguez Hernandez <carlosrh@vmware.com>

* [skip ci] Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <containers@bitnami.com>

Co-authored-by: Bitnami Containers <containers@bitnami.com>
2022-05-13 12:26:57 +02:00

51 lines
2.0 KiB
YAML

{{- if .Values.web.enabled }}
{{- if .Values.web.rbac.create }}
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: RoleBinding
metadata:
name: {{ include "concourse.web.fullname" . }}
namespace: {{ .Release.Namespace | quote }}
labels: {{- include "common.labels.standard" . | nindent 4 }}
app.kubernetes.io/component: web
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ include "concourse.web.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ include "concourse.web.serviceAccountName" . }}
namespace: {{ .Release.Namespace | quote }}
{{- end }}
{{- $pspAvailable := (semverCompare "<1.25-0" (include "common.capabilities.kubeVersion" .)) }}
{{- if and $pspAvailable .Values.web.psp.create }}
---
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: RoleBinding
metadata:
name: {{ printf "%s-psp" (include "concourse.web.fullname" .) }}
namespace: {{ .Release.Namespace | quote }}
labels: {{- include "common.labels.standard" . | nindent 4 }}
app.kubernetes.io/component: web
{{- if .Values.commonLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
{{- end }}
{{- if .Values.commonAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
{{- end }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ printf "%s-psp" (include "concourse.web.fullname" .) }}
subjects:
- kind: ServiceAccount
name: {{ include "concourse.web.serviceAccountName" . }}
namespace: {{ .Release.Namespace | quote }}
{{- end }}
{{- end }}