1 {{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }}
3 {{- $ctx := dict "ctx" $topCtx "key" $tillerKey }}
8 name: {{ include "common.serviceaccountname.appmgr" . }}
9 namespace: {{ include "common.namespace.platform" . }}
11 apiVersion: rbac.authorization.k8s.io/v1beta1
14 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
15 namespace: {{ include "common.tillerDeployNameSpace" $ctx }}
18 resources: ["pods/portforward"]
21 resources: ["pods", "configmaps", "deployments", "services"]
22 verbs: ["get", "list", "create", "delete"]
23 {{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" ) (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }}
25 resources: ["secrets"]
26 resourceNames: [ {{ include "common.tillerHelmClientTLSSecret" $ctx | quote }} ]
30 apiVersion: rbac.authorization.k8s.io/v1beta1
33 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
34 namespace: {{ include "common.tillerDeployNameSpace" $ctx }}
36 apiGroup: rbac.authorization.k8s.io
38 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access
40 - kind: ServiceAccount
41 name: {{ include "common.serviceaccountname.appmgr" . }}
42 namespace: {{ include "common.namespace.platform" . }}
44 apiVersion: rbac.authorization.k8s.io/v1beta1
47 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig
48 namespace: {{ include "common.tillerNameSpace" $ctx }}
51 resources: ["configmaps", "endpoints"]
54 apiVersion: rbac.authorization.k8s.io/v1beta1
57 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.namespace.xapp" . }}-getappconfig
58 namespace: {{ include "common.tillerNameSpace" $ctx }}
60 apiGroup: rbac.authorization.k8s.io
62 name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig
64 - kind: ServiceAccount
65 name: {{ include "common.serviceaccountname.appmgr" . }}
66 namespace: {{ include "common.namespace.platform" . }}