Always create sshPortal authorization resources and add a service acc…

…ount token resource
uselagoon · Sep 7, 2023 · 7848a59 · 7848a59
1 parent a756ae4
commit 7848a59
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 6 deletions.
diff --git a/charts/lagoon-remote/templates/ssh-portal.clusterrole.yaml b/charts/lagoon-remote/templates/ssh-portal.clusterrole.yaml
@@ -1,4 +1,3 @@
-{{- if .Values.sshPortal.enabled -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -42,4 +41,3 @@ rules:
   - pods/exec
   verbs:
   - create
-{{- end }}
diff --git a/charts/lagoon-remote/templates/ssh-portal.clusterrolebinding.yaml b/charts/lagoon-remote/templates/ssh-portal.clusterrolebinding.yaml
@@ -1,4 +1,3 @@
-{{- if .Values.sshPortal.enabled -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
@@ -13,4 +12,3 @@ roleRef:
   kind: ClusterRole
   name: {{ include "lagoon-remote.sshPortal.fullname" . }}
   apiGroup: rbac.authorization.k8s.io
-{{- end }}
diff --git a/charts/lagoon-remote/templates/ssh-portal.serviceaccount.secret.yaml b/charts/lagoon-remote/templates/ssh-portal.serviceaccount.secret.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/service-account-token
+metadata:
+  name: {{ include "lagoon-remote.sshPortal.fullname" . }}-token
+  labels:
+    {{- include "lagoon-remote.sshPortal.labels" . | nindent 4 }}
+  annotations:
+    kubernetes.io/service-account.name: {{ include "lagoon-remote.sshPortal.serviceAccountName" . }}
diff --git a/charts/lagoon-remote/templates/ssh-portal.serviceaccount.yaml b/charts/lagoon-remote/templates/ssh-portal.serviceaccount.yaml
@@ -1,4 +1,3 @@
-{{- if .Values.sshPortal.enabled -}}
 apiVersion: v1
 kind: ServiceAccount
 metadata:
@@ -9,4 +8,3 @@ metadata:
   annotations:
     {{- toYaml . | nindent 4 }}
   {{- end }}
-{{- end }}