X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=helm%2Fappmgr%2Ftemplates%2Fserviceaccount.yaml;h=c873e302d6aa3ced8349764ffd0eecd7fe64a86b;hb=78bfe429e8840172faac2b9df7ca73587846635f;hp=f0da9a5a93ddf4ef0bc29e9e4640037d5a1c5c24;hpb=38dc857062b14145f5b9db89d10eba0ae5b90d11;p=ric-plt%2Fric-dep.git diff --git a/helm/appmgr/templates/serviceaccount.yaml b/helm/appmgr/templates/serviceaccount.yaml index f0da9a5..c873e30 100644 --- a/helm/appmgr/templates/serviceaccount.yaml +++ b/helm/appmgr/templates/serviceaccount.yaml @@ -1,3 +1,19 @@ +################################################################################ +# Copyright (c) 2019-2020 AT&T Intellectual Property. # +# # +# Licensed under the Apache License, Version 2.0 (the "License"); # +# you may not use this file except in compliance with the License. # +# You may obtain a copy of the License at # +# # +# http://www.apache.org/licenses/LICENSE-2.0 # +# # +# Unless required by applicable law or agreed to in writing, software # +# distributed under the License is distributed on an "AS IS" BASIS, # +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # +# See the License for the specific language governing permissions and # +# limitations under the License. # +################################################################################ + {{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }} {{- $topCtx := . }} {{- $ctx := dict "ctx" $topCtx "key" $tillerKey }} @@ -18,7 +34,7 @@ rules: - apiGroups: [""] resources: ["pods/portforward"] verbs: ["create"] -- apiGroups: [""] +- apiGroups: [""] resources: ["pods", "configmaps", "deployments", "services"] verbs: ["get", "list", "create", "delete"] {{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" ) (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }} @@ -48,9 +64,9 @@ metadata: name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig namespace: {{ include "common.tillerNameSpace" $ctx }} rules: -- apiGroups: [""] +- apiGroups: [""] resources: ["configmaps", "endpoints"] - verbs: ["get"] + verbs: ["get", "list", "create", "update", "delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding @@ -64,4 +80,4 @@ roleRef: subjects: - kind: ServiceAccount name: {{ include "common.serviceaccountname.appmgr" . }} - namespace: {{ include "common.namespace.platform" . }} + namespace: {{ include "common.namespace.platform" . }} \ No newline at end of file