Allow xAppMgr to manipulate xApp configmap

Change-Id: Ife59fd98b3972cd23124e7fa843cf1d0cbd451b8
Signed-off-by: wrider <lji@research.att.com>
Issue-ID: RIC-225

diff --git a/helm/appmgr/templates/serviceaccount.yaml b/helm/appmgr/templates/serviceaccount.yaml
index f0da9a5..c873e30 100644 (file)
--- a/helm/appmgr/templates/serviceaccount.yaml
+++ b/helm/appmgr/templates/serviceaccount.yaml
@@ -1,3 +1,19 @@
+################################################################################
+#   Copyright (c) 2019-2020 AT&T Intellectual Property.                        #
+#                                                                              #
+#   Licensed under the Apache License, Version 2.0 (the "License");            #
+#   you may not use this file except in compliance with the License.           #
+#   You may obtain a copy of the License at                                    #
+#                                                                              #
+#       http://www.apache.org/licenses/LICENSE-2.0                             #
+#                                                                              #
+#   Unless required by applicable law or agreed to in writing, software        #
+#   distributed under the License is distributed on an "AS IS" BASIS,          #
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.   #
+#   See the License for the specific language governing permissions and        #
+#   limitations under the License.                                             #
+################################################################################
+
 {{- $tillerKey := .Values.appmgr.tillerkey | default "ricxapp" }}
 {{- $topCtx :=  . }}
 {{- $ctx := dict "ctx" $topCtx "key" $tillerKey }}
@@ -18,7 +34,7 @@ rules:
 - apiGroups: [""]
   resources: ["pods/portforward"]
   verbs: ["create"]
-- apiGroups: [""]  
+- apiGroups: [""]
   resources: ["pods", "configmaps", "deployments", "services"]
   verbs: ["get", "list", "create", "delete"]
 {{- if or (eq (include "common.tillerTLSVerify" $ctx) "true" )  (eq (include "common.tillerTLSAuthenticate" $ctx) "true") }}
@@ -48,9 +64,9 @@ metadata:
   name: {{ include "common.serviceaccountname.appmgr" . }}-{{ include "common.tillerNameSpace" $ctx }}-getappconfig
   namespace: {{ include "common.tillerNameSpace" $ctx }}
 rules:
-- apiGroups: [""]  
+- apiGroups: [""]
   resources: ["configmaps", "endpoints"]
-  verbs: ["get"]
+  verbs: ["get", "list", "create", "update", "delete"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1beta1
 kind: RoleBinding
@@ -64,4 +80,4 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: {{ include "common.serviceaccountname.appmgr" . }}
-    namespace: {{ include "common.namespace.platform" . }}
+    namespace: {{ include "common.namespace.platform" . }}
\ No newline at end of file