From 4051e77a8ef8642d5b8bf51541144c4538a0041a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matthieu=20Blotti=C3=A8re=20Seroux?=
 <matthieu.blottiere@owkin.com>
Date: Mon, 6 Jan 2025 15:41:31 +0100
Subject: [PATCH] fix(chart): add role on builder pod
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The builder pod always need access to the kubernetes API since it will
spawn kaniko builder pods.

Signed-off-by: Matthieu Blottière Seroux <matthieu.blottiere@owkin.com>
---
 charts/substra-backend/CHANGELOG.md                       | 6 +++++-
 charts/substra-backend/Chart.yaml                         | 2 +-
 charts/substra-backend/templates/statefulset-builder.yaml | 3 ---
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/charts/substra-backend/CHANGELOG.md b/charts/substra-backend/CHANGELOG.md
index b999ac203..9396fadc8 100644
--- a/charts/substra-backend/CHANGELOG.md
+++ b/charts/substra-backend/CHANGELOG.md
@@ -1,6 +1,10 @@
 # Changelog
 
 <!-- towncrier release notes start -->
+## [26.15.1] - 2025-01-06
+
+Fix missing role on builder pod
+
 ## [26.15.0] - 2024-12-16
 
 Bump app version to 1.0.0
@@ -25,7 +29,7 @@ Pods relying on redis uses a new init container `wait-redis` which wait for redi
 
 # Added
 
-`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`. 
+`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`.
 
 ## [26.12.0] - 2024-09-30
 
diff --git a/charts/substra-backend/Chart.yaml b/charts/substra-backend/Chart.yaml
index 16cf4c80d..c3aad8351 100644
--- a/charts/substra-backend/Chart.yaml
+++ b/charts/substra-backend/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: substra-backend
 home: https://github.com/Substra
-version: 26.15.0
+version: 26.15.1
 appVersion: 1.0.0
 kubeVersion: '>= 1.19.0-0'
 description: Main package for Substra
diff --git a/charts/substra-backend/templates/statefulset-builder.yaml b/charts/substra-backend/templates/statefulset-builder.yaml
index 1bab3c0eb..9d41760d3 100644
--- a/charts/substra-backend/templates/statefulset-builder.yaml
+++ b/charts/substra-backend/templates/statefulset-builder.yaml
@@ -33,10 +33,7 @@ spec:
         app.kubernetes.io/name: {{ template "substra.name" . }}-builder
         {{ include "substra.labels" . | nindent 8 }}
         app.kubernetes.io/component: substra-builder
-        {{- if .Values.privateCa.enabled }}
-        # Needed to create the secret with the certificate
         role-api-k8s-client: 'true'
-        {{- end }}
         role-database-client: 'true'
         role-internet-egress: 'true'
         role-orchestrator-client: 'true'