From 78bfe429e8840172faac2b9df7ca73587846635f Mon Sep 17 00:00:00 2001 From: wrider Date: Tue, 25 Feb 2020 11:18:48 -0500 Subject: [PATCH] Allow xAppMgr to manipulate xApp configmap Change-Id: Ife59fd98b3972cd23124e7fa843cf1d0cbd451b8 Signed-off-by: wrider Issue-ID: RIC-225 --- helm/appmgr/templates/serviceaccount.yaml | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/helm/appmgr/templates/serviceaccount.yaml b/helm/appmgr/templates/serviceaccount.yaml index f0da9a5..c873e30 100644 --- a/helm/appmgr/templates/serviceaccount.yaml +++ b/helm/appmgr/templates/serviceaccount.yaml @@ -1,3 +1,19 @@ +################################################################################ +# Copyright (c) 2019-2020 AT&T Intellectual Property. # +# # +# Licensed under the Apache License, Version 2.0 (the "License"); # +# you may not use this file except in compliance with the License. # +# You may obtain a copy of the License at # +# # +# http://www.apache.org/licenses/LICENSE-2.0 # +# # +# Unless required by applicable law or agreed to in writing, software # +# distributed under the License is distributed on an "AS IS" BASIS, # +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # +# See the License for the specific language governing permissions and # +# limitations under the License. # +################################################################################ + {{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }} {{- $topCtx := . }} {{- $ctx := dict "ctx" $topCtx "key" $tillerKey }} @@ -18,7 +34,7 @@ rules: - apiGroups: [""] resources: ["pods/portforward"] verbs: ["create"] -- apiGroups: [""] +- apiGroups: [""] resources: ["pods", "configmaps", "deployments", "services"] verbs: ["get", "list", "create", "delete"] {{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" ) (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }} @@ -48,9 +64,9 @@ metadata: name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig namespace: {{ include "common.tillerNameSpace" $ctx }} rules: -- apiGroups: [""] +- apiGroups: [""] resources: ["configmaps", "endpoints"] - verbs: ["get"] + verbs: ["get", "list", "create", "update", "delete"] --- apiVersion: rbac.authorization.k8s.io/v1beta1 kind: RoleBinding @@ -64,4 +80,4 @@ roleRef: subjects: - kind: ServiceAccount name: {{ include "common.serviceaccountname.appmgr" . }} - namespace: {{ include "common.namespace.platform" . }} + namespace: {{ include "common.namespace.platform" . }} \ No newline at end of file -- 2.16.6