add clusterrole for missing permissions

Without them it doesn't work on protected clusters.
eclipse-tractusx · Jan 5, 2023 · ddf1d77 · ddf1d77
1 parent 19a381e
commit ddf1d77
Show file tree

Hide file tree

Showing 2 changed files with 25 additions and 0 deletions.
diff --git a/charts/app-dashboard/templates/clusterrole.yaml b/charts/app-dashboard/templates/clusterrole.yaml
@@ -0,0 +1,10 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+
+metadata:
+  name: {{ include "app-dashboard.serviceAccountName" . }}-cluster-role
+
+rules:
+  - apiGroups: ["argoproj.io"]
+    resources: ["applications"]
+    verbs: ["list"]
diff --git a/charts/app-dashboard/templates/clusterrolebinding.yaml b/charts/app-dashboard/templates/clusterrolebinding.yaml
@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+
+metadata:
+  name: {{ include "app-dashboard.serviceAccountName" . }}-cluster-role-binding
+
+roleRef:
+  kind: ClusterRole
+  name: {{ include "app-dashboard.serviceAccountName" . }}-cluster-role
+  apiGroup: rbac.authorization.k8s.io
+
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "app-dashboard.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}