allow kubechecks to access argocd settings

zapier · Nov 9, 2024 · 2b224e0 · 2b224e0
1 parent 0598e32
commit 2b224e0
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 1 deletion.
diff --git a/charts/kubechecks/Chart.yaml b/charts/kubechecks/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: kubechecks
 description: A Helm chart for kubechecks
-version: 0.4.5
+version: 0.5.0
 type: application
 maintainers:
   - name: zapier
diff --git a/charts/kubechecks/templates/role.yaml b/charts/kubechecks/templates/role.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: kubechecks
+  namespace: {{ .Values.argocd.namespace }}
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+      - secrets
+    verbs:
+      - get
+      - list
+      - watch
diff --git a/charts/kubechecks/templates/rolebinding.yaml b/charts/kubechecks/templates/rolebinding.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: kubechecks
+  namespace: {{ .Values.argocd.namespace }}
+roleRef:
+  kind: Role
+  name: kubechecks
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "kubechecks.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
diff --git a/charts/kubechecks/values.yaml b/charts/kubechecks/values.yaml
@@ -1,4 +1,7 @@
 # Labels to apply to all resources created by this Helm chart
+argocd:
+  namespace: argocd
+
 commonLabels: {}
 
 configMap: