1 {{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }}
3 {{- $ctx := dict "ctx" $topCtx "key" $tillerKey }}
4 {{- $certName := include "common.tillerHelmClientTLSSecret" $ctx }}
9 name: {{ include "common.serviceaccountname.appmgr" . }}
10 namespace: {{ include "common.namespace.platform" . }}
12 apiVersion: rbac.authorization.k8s.io/v1beta1
15 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
16 namespace: {{ include "common.tillerDeployNameSpace" $ctx }}
19 resources: ["pods/portforward"]
22 resources: ["pods", "configmaps", "deployments", "services"]
23 verbs: ["get", "list", "create", "delete"]
24 {{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" ) (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }}
26 resources: ["secrets"]
27 resourceNames: [ {{ include "common.tillerHelmClientTLSSecret" $ctx | quote }} ]
31 apiVersion: rbac.authorization.k8s.io/v1beta1
34 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
35 namespace: {{ include "common.tillerDeployNameSpace" $ctx }}
37 apiGroup: rbac.authorization.k8s.io
39 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
41 - kind: ServiceAccount
42 name: {{ include "common.serviceaccountname.appmgr" . }}
43 namespace: {{ include "common.namespace.platform" . }}
45 apiVersion: rbac.authorization.k8s.io/v1beta1
48 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig
49 namespace: {{ include "common.tillerNameSpace" $ctx }}
52 resources: ["configmaps", "endpoints"]
55 apiVersion: rbac.authorization.k8s.io/v1beta1
58 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.namespace.xapp" . }}-getappconfig
59 namespace: {{ include "common.tillerNameSpace" $ctx }}
61 apiGroup: rbac.authorization.k8s.io
63 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig
65 - kind: ServiceAccount
66 name: {{ include "common.serviceaccountname.appmgr" . }}
67 namespace: {{ include "common.namespace.platform" . }}