fix(chart): add role on builder pod

The builder pod always need access to the kubernetes API since it will spawn kaniko builder pods. Signed-off-by: Matthieu Blottière Seroux <[email protected]>
Substra · Jan 6, 2025 · 4051e77 · 4051e77
1 parent 86619f3
commit 4051e77
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 5 deletions.
diff --git a/charts/substra-backend/CHANGELOG.md b/charts/substra-backend/CHANGELOG.md
@@ -1,6 +1,10 @@
 # Changelog
 
 <!-- towncrier release notes start -->
+## [26.15.1] - 2025-01-06
+
+Fix missing role on builder pod
+
 ## [26.15.0] - 2024-12-16
 
 Bump app version to 1.0.0
@@ -25,7 +29,7 @@ Pods relying on redis uses a new init container `wait-redis` which wait for redi
 
 # Added
 
-`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`. 
+`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`.
 
 ## [26.12.0] - 2024-09-30
 

diff --git a/charts/substra-backend/Chart.yaml b/charts/substra-backend/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: substra-backend
 home: https://github.com/Substra
-version: 26.15.0
+version: 26.15.1
 appVersion: 1.0.0
 kubeVersion: '>= 1.19.0-0'
 description: Main package for Substra

diff --git a/charts/substra-backend/templates/statefulset-builder.yaml b/charts/substra-backend/templates/statefulset-builder.yaml
@@ -33,10 +33,7 @@ spec:
         app.kubernetes.io/name: {{ template "substra.name" . }}-builder
         {{ include "substra.labels" . | nindent 8 }}
         app.kubernetes.io/component: substra-builder
-        {{- if .Values.privateCa.enabled }}
-        # Needed to create the secret with the certificate
         role-api-k8s-client: 'true'
-        {{- end }}
         role-database-client: 'true'
         role-internet-egress: 'true'
         role-orchestrator-client: 'true'