feat: allow rbac to pe externally provisioned (#1005)

* feat: allow rbac to pe externally provisioned Signed-off-by: laurentiusoica <[email protected]> * fix: add new parameter in docs Signed-off-by: laurentiusoica <[email protected]> --------- Signed-off-by: laurentiusoica <[email protected]> Co-authored-by: laurentiusoica <[email protected]>
OT-CONTAINER-KIT · Jun 22, 2024 · f1080f5 · f1080f5
1 parent dd4e8e1
commit f1080f5
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 0 deletions.
diff --git a/charts/redis-operator/readme.md b/charts/redis-operator/readme.md
@@ -92,6 +92,7 @@ kubectl create secret tls <webhook-server-cert> --key tls.key --cert tls.crt -n
 | `resources.requests.cpu`                      | CPU request                            | `500m`                                           |
 | `resources.requests.memory`                   | Memory request                         | `500Mi`                                          |
 | `replicas`                                    | Number of replicas                     | `1`                                              |
+| `rbac.enabled`                                | Feature flag for rbac resources        | `true`                                           |
 | `serviceAccountName`                          | Service account name                   | `redis-operator`                                 |
 | `serviceAccount.automountServiceAccountToken` | Automount service account token        | `true`                                           |
 | `certificate.name`                            | Certificate name                       | `serving-cert`                                   |

diff --git a/charts/redis-operator/templates/role-binding.yaml b/charts/redis-operator/templates/role-binding.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.enabled }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -19,3 +20,4 @@ roleRef:
   kind: ClusterRole
   name: {{ .Values.redisOperator.name }}
   apiGroup: rbac.authorization.k8s.io
+{{- end }}
diff --git a/charts/redis-operator/templates/role.yaml b/charts/redis-operator/templates/role.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.enabled }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -124,3 +125,4 @@ rules:
   - patch
   - update
   - watch
+{{- end }}
diff --git a/charts/redis-operator/templates/service-account.yaml b/charts/redis-operator/templates/service-account.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.enabled }}
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -13,3 +14,4 @@ metadata:
     app.kubernetes.io/version : {{ .Chart.AppVersion }}
     app.kubernetes.io/component: service-account
     app.kubernetes.io/part-of : {{ .Release.Name }}
+{{- end }}
diff --git a/charts/redis-operator/values.yaml b/charts/redis-operator/values.yaml
@@ -30,6 +30,8 @@ resources:
 
 replicas: 1
 
+rbac:
+  enabled: true
 serviceAccountName: redis-operator
 
 serviceAccount: