gitea/.helm/templates/restore-rbac.yaml
bootstrap 90fd37101b
Some checks failed
trash-ci / smoke (push) Failing after 11s
Initial Gitea chart with smoke CI
2026-05-06 17:35:56 +03:00

74 lines
2.0 KiB
YAML

{{- if and .Values.restore .Values.restore.enabled .Values.restore.scaleGitea.enabled }}
apiVersion: v1
kind: ServiceAccount
metadata:
name: {{ default .Values.restore.name .Values.restore.scaleGitea.serviceAccountName | quote }}
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "gitea.labels" . | nindent 4 }}
annotations:
helm.sh/hook: pre-install,pre-upgrade
helm.sh/hook-weight: "-30"
helm.sh/hook-delete-policy: before-hook-creation
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ default .Values.restore.name .Values.restore.scaleGitea.serviceAccountName | quote }}
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "gitea.labels" . | nindent 4 }}
annotations:
helm.sh/hook: pre-install,pre-upgrade
helm.sh/hook-weight: "-30"
helm.sh/hook-delete-policy: before-hook-creation
rules:
- apiGroups:
- apps
resources:
- deployments
- deployments/scale
verbs:
- get
- list
- watch
- patch
- update
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- list
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ default .Values.restore.name .Values.restore.scaleGitea.serviceAccountName | quote }}
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "gitea.labels" . | nindent 4 }}
annotations:
helm.sh/hook: pre-install,pre-upgrade
helm.sh/hook-weight: "-30"
helm.sh/hook-delete-policy: before-hook-creation
subjects:
- kind: ServiceAccount
name: {{ default .Values.restore.name .Values.restore.scaleGitea.serviceAccountName | quote }}
namespace: {{ .Release.Namespace | quote }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ default .Values.restore.name .Values.restore.scaleGitea.serviceAccountName | quote }}
{{- end }}