1{{- if .Values.createNamespaceMetadataJob}}
2kind: ServiceAccount
3apiVersion: v1
4metadata:
5 labels:
6 linkerd.io/extension: viz
7 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
8 annotations:
9 {{ include "partials.annotations.created-by" . }}
10 "helm.sh/hook": post-install
11 "helm.sh/hook-weight": "0"
12 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
13 name: namespace-metadata
14 namespace: {{.Release.Namespace}}
15{{- include "partials.image-pull-secrets" .Values.imagePullSecrets }}
16---
17apiVersion: rbac.authorization.k8s.io/v1
18kind: Role
19metadata:
20 labels:
21 linkerd.io/extension: viz
22 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
23 annotations:
24 {{ include "partials.annotations.created-by" . }}
25 "helm.sh/hook": post-install
26 "helm.sh/hook-weight": "0"
27 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
28 name: namespace-metadata
29 namespace: {{.Release.Namespace}}
30rules:
31- apiGroups: [""]
32 resources: ["namespaces"]
33 verbs: ["get", "patch"]
34 resourceNames: ["{{.Release.Namespace}}"]
35---
36apiVersion: rbac.authorization.k8s.io/v1
37kind: RoleBinding
38metadata:
39 labels:
40 linkerd.io/extension: viz
41 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
42 annotations:
43 {{ include "partials.annotations.created-by" . }}
44 "helm.sh/hook": post-install
45 "helm.sh/hook-weight": "0"
46 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
47 name: namespace-metadata
48 namespace: {{.Release.Namespace}}
49roleRef:
50 kind: Role
51 name: namespace-metadata
52 apiGroup: rbac.authorization.k8s.io
53subjects:
54- kind: ServiceAccount
55 name: namespace-metadata
56 namespace: {{.Release.Namespace}}
57---
58apiVersion: rbac.authorization.k8s.io/v1
59kind: RoleBinding
60metadata:
61 namespace: {{ .Values.linkerdNamespace }}
62 labels:
63 linkerd.io/extension: viz
64 {{- with .Values.commonLabels }}{{ toYaml . | trim | nindent 4 }}{{- end }}
65 annotations:
66 {{ include "partials.annotations.created-by" . }}
67 "helm.sh/hook": post-install
68 "helm.sh/hook-weight": "0"
69 "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
70 name: viz-namespace-metadata-linkerd-config
71roleRef:
72 kind: Role
73 name: ext-namespace-metadata-linkerd-config
74 apiGroup: rbac.authorization.k8s.io
75subjects:
76- kind: ServiceAccount
77 name: namespace-metadata
78 namespace: {{.Release.Namespace}}
79{{- end }}
View as plain text