X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=ric-platform%2F50-RIC-Platform%2Fhelm%2Fkong%2Fcharts%2Fkong%2Ftemplates%2Fcontroller-rbac-role.yaml;fp=ric-platform%2F50-RIC-Platform%2Fhelm%2Fkong%2Fcharts%2Fkong%2Ftemplates%2Fcontroller-rbac-role.yaml;h=90e076730d9d0382638e59b1de7adb9ce9e9aa77;hb=c3993d1b897672cba96a53605d0d5d8788518536;hp=0000000000000000000000000000000000000000;hpb=581a3a371b3d0adfb6d9c831ad6877c3e07df0cd;p=it%2Fdep.git

diff --git a/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-rbac-role.yaml b/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-rbac-role.yaml
new file mode 100755
index 00000000..90e07673
--- /dev/null
+++ b/ric-platform/50-RIC-Platform/helm/kong/charts/kong/templates/controller-rbac-role.yaml
@@ -0,0 +1,47 @@
+{{- if and .Values.ingressController.rbac.create .Values.ingressController.enabled -}}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+kind: Role
+metadata:
+  name:  {{ template "kong.fullname" . }}
+  namespace: {{ .Release.namespace }}
+  labels:
+    app: {{ template "kong.name" . }}
+    chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
+    release: "{{ .Release.Name }}"
+    heritage: "{{ .Release.Service }}"
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+      - pods
+      - secrets
+      - namespaces
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    resourceNames:
+      # Defaults to "<election-id>-<ingress-class>"
+      # Here: "<kong-ingress-controller-leader-nginx>-<nginx>"
+      # This has to be adapted if you change either parameter
+      # when launching the nginx-ingress-controller.
+      - "kong-ingress-controller-leader-{{ .Values.ingressController.ingressClass }}-{{ .Values.ingressController.ingressClass }}"
+    verbs:
+      - get
+      - update
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - create
+  - apiGroups:
+      - ""
+    resources:
+      - endpoints
+    verbs:
+      - get
+{{- end -}}