Commit5523485

committed

allow user to specify custom perms as a property

1 parent494d739 commit5523485Copy full SHA for 5523485

File tree

+17

-15

lines changed

+17

-15

lines changed

Lines changed: 15 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -94,9 +94,21 @@ coder:`
`94`	`94`	`# coder.serviceAccount.enableDeployments -- Provides the service account permission`
`95`	`95`	`# to manage Kubernetes deployments.`
`96`	`96`	`enableDeployments:true`
`97`		`-# coder.serviceAccount.enableServices -- Provides the service account permission`
`98`		`-# to manage Kubernetes services.`
`99`		`-enableServices:false`
	`97`	`+# coder.serviceAccount.extraResources -- A list of service account permission`
	`98`	`+# to be menaged inside the workspace.`
	`99`	`+extraResources:[]`
	`100`	`+# - apiGroups: [""]`
	`101`	`+# resources: ["services"]`
	`102`	`+# verbs:`
	`103`	`+# - create`
	`104`	`+# - delete`
	`105`	`+# - deletecollection`
	`106`	`+# - get`
	`107`	`+# - list`
	`108`	`+# - patch`
	`109`	`+# - update`
	`110`	`+# - watch`
	`111`	`+`
`100`	`112`	`# coder.serviceAccount.annotations -- The Coder service account annotations.`
`101`	`113`	`annotations:{}`
`102`	`114`	`# coder.serviceAccount.name -- The service account name`

Lines changed: 2 additions & 12 deletions

Original file line number	Diff line number	Diff line change
`@@ -43,18 +43,8 @@ rules:`
`43`	`43`	`-update`
`44`	`44`	`-watch`
`45`	`45`	`{{- end }}`
`46`		`-{{- if .Values.coder.serviceAccount.enableServices }}`
`47`		`- -apiGroups:[""]`
`48`		`-resources:["services"]`
`49`		`-verbs:`
`50`		`- -create`
`51`		`- -delete`
`52`		`- -deletecollection`
`53`		`- -get`
`54`		`- -list`
`55`		`- -patch`
`56`		`- -update`
`57`		`- -watch`
	`46`	`+{{- with .Values.coder.serviceAccount.extraResources }}`
	`47`	`+{{ toYaml . \| nindent 2 }}`
`58`	`48`	`{{- end }}`
`59`	`49`	`---`
`60`	`50`	`apiVersion:rbac.authorization.k8s.io/v1`

Comments

(0)