Add missing RBAC for ServiceMetadataWatchers (#89)

* Add missing RBAC for ServiceMetadataWatchers * Add extraRBAC to helm values * Add serviceMetadata to configmap template --------- Co-authored-by: aalexand <[email protected]>
adobe · Nov 1, 2023 · cd373f2 · cd373f2
1 parent 181dfa7
commit cd373f2
Show file tree

Hide file tree

Showing 3 changed files with 51 additions and 2 deletions.
diff --git a/charts/cluster-registry-client/Chart.yaml b/charts/cluster-registry-client/Chart.yaml
@@ -15,5 +15,5 @@ maintainers:
   - name: radu-catalina
     email: [email protected]
 
-version: 0.1.8
-appVersion: v1.4.2
+version: 0.2.0
+appVersion: v1.5.1
diff --git a/charts/cluster-registry-client/templates/clusterrole.yaml b/charts/cluster-registry-client/templates/clusterrole.yaml
@@ -31,3 +31,40 @@ rules:
       - get
       - patch
       - update
+  - apiGroups:
+      - registry.ethos.adobe.com
+    resources:
+      - servicemetadatawatchers
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - registry.ethos.adobe.com
+    resources:
+      - servicemetadatawatchers/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - registry.ethos.adobe.com
+    resources:
+      - servicemetadatawatchers/status
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - get
+      - watch
+      - list
+  {{- with .Values.extraRBAC }}
+    {{- toYaml . | nindent 2 }}
+  {{- end }}
diff --git a/charts/cluster-registry-client/templates/configmap.yaml b/charts/cluster-registry-client/templates/configmap.yaml
@@ -35,4 +35,16 @@ data:
       {{- else }}
       alertMap: []
       {{- end }}
+    {{- if .Values.clusterRegistryClient.serviceMetadata }}
+    serviceMetadata:
+      serviceIdAnnotation: {{ .Values.clusterRegistryClient.serviceIdAnnotation | default "adobe.serviceid" }}
+      {{- if .Values.clusterRegistryClient.serviceMetadata.watchedGVKs }}
+      watchedGVKs:
+      {{- range $_, $gvk := .Values.clusterRegistryClient.serviceMetadata.watchedGVKs }}
+        - group: {{ $gvk.group }}
+          version: {{ $gvk.version }}
+          kind: {{ $gvk.kind }}
+      {{- end }}
+      {{- end }}
+    {{- end }}
 {{- end }}