X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=ric-platform%2F50-RIC-Platform%2Fhelm%2Fappmgr%2Ftemplates%2Fserviceaccount.yaml;fp=ric-platform%2F50-RIC-Platform%2Fhelm%2Fappmgr%2Ftemplates%2Fserviceaccount.yaml;h=0000000000000000000000000000000000000000;hb=dc00cdf008775e2ac5dddb186d1eb81e80370b69;hp=96da29abb20efb1c125986c0bdffeaf1baa3b6e3;hpb=ca9b3ee64b3966fa1d20226b361b4f614434129e;p=it%2Fdep.git diff --git a/ric-platform/50-RIC-Platform/helm/appmgr/templates/serviceaccount.yaml b/ric-platform/50-RIC-Platform/helm/appmgr/templates/serviceaccount.yaml deleted file mode 100644 index 96da29ab..00000000 --- a/ric-platform/50-RIC-Platform/helm/appmgr/templates/serviceaccount.yaml +++ /dev/null @@ -1,66 +0,0 @@ -{{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }} -{{- $topCtx := . }} -{{- $ctx := dict "ctx" $topCtx "key" $tillerKey }} ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ include "common.serviceaccountname.appmgr" . }} - namespace: {{ include "common.namespace.platform" . }} ---- -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: Role -metadata: - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access - namespace: {{ include "common.tillerDeployNameSpace" $ctx }} -rules: -- apiGroups: [""] - resources: ["pods/portforward"] - verbs: ["create"] -- apiGroups: [""] - resources: ["pods", "configmaps", "deployments", "services"] - verbs: ["get", "list", "create", "delete"] -{{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" ) (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }} -- apiGroups: [""] - resources: ["secrets"] - resourceNames: [ {{ include "common.tillerHelmClientTLSSecret" $ctx | quote }} ] - verbs: ["get"] -{{- end }} ---- -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: RoleBinding -metadata: - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access - namespace: {{ include "common.tillerDeployNameSpace" $ctx }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-access -subjects: - - kind: ServiceAccount - name: {{ include "common.serviceaccountname.appmgr" . }} - namespace: {{ include "common.namespace.platform" . }} ---- -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: Role -metadata: - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig - namespace: {{ include "common.tillerNameSpace" $ctx }} -rules: -- apiGroups: [""] - resources: ["configmaps", "endpoints"] - verbs: ["get"] ---- -apiVersion: rbac.authorization.k8s.io/v1beta1 -kind: RoleBinding -metadata: - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.namespace.xapp" . }}-getappconfig - namespace: {{ include "common.tillerNameSpace" $ctx }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig -subjects: - - kind: ServiceAccount - name: {{ include "common.serviceaccountname.appmgr" . }} - namespace: {{ include "common.namespace.platform" . }}