clusterrole.yaml: add if condition for .Values.rbac.enabled

[kastl-ars]

clusterrole.yaml: add if condition for .Values.rbac.enabled, like on the clusterrolebinding

fix #241

[mittal-ishaan]

Hi @kastl-ars
Thank you for this. LGTM
Due to my recent merge, we did add rbac like this which we would want to consider upon. My bad here, I should have seen it under my PR.
Should we also have them under this if condition too, we are already gating them under a helm config?

Question is do we also want to have rbac.enabled flag gate the cluster role needed in openshift environment too (that looks exactly what this flag is intended to do) or we can have scenarios where a user wants to disable the rbac.enabled flag but want the required cluster role, etc for openshift environment.

Otherwise the Issue raised and PR is really helpful

[kastl-ars]

Hi @kastl-ars Thank you for this. LGTM Due to my recent merge, we did add rbac like this which we would want to consider upon. My bad here, I should have seen it under my PR. Should we also have them under this if condition too, we are already gating them under a helm config?

Sorry, I am not quite sure what you mean?

Question is do we also want to have rbac.enabled flag gate the cluster role needed in openshift environment too (that looks exactly what this flag is intended to do) or we can have scenarios where a user wants to disable the rbac.enabled flag but want the required cluster role, etc for openshift environment.

In my opinion, as the OpenShift stuff needs to be enabled explicitly and there is already a value to enable/disable the creation of the clusterRoleBinding, I would say they can be left independent of each other.

https://github.com/opencost/opencost-helm-chart/blob/main/charts/opencost/values.yaml#L340
https://github.com/opencost/opencost-helm-chart/blob/main/charts/opencost/values.yaml#L342

The cluster I want to run OpenCost in does not allow me to create roles and rolebindings, so I will keep these settings disabled and have the cluster owner create them for me. But I will enable the general OpenShift integration.

[kastl-ars]

Is there anything from blocking this from being merged and released? This prevents me from running OpenCost in one of my clusters, where my permissions do not allow creating roles and rolebindings. And the fix is simple...