Update helm chart to support clusterrole binding

smartcontractkit · Feb 13, 2024 · 3d87c76 · 3d87c76
1 parent 2380220
commit 3d87c76
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/charts/chainlink-cluster/templates/rolebinding.yaml b/charts/chainlink-cluster/templates/rolebinding.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.rbac.createRoleBinding }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: crib-rolebinding
+subjects:
+- kind: Group
+  name: {{ .Values.rbac.roleBindingGroupName }}
+  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.rbac.clusterRoleName }}
+  apiGroup: rbac.authorization.k8s.io
+{{- end }}
diff --git a/charts/chainlink-cluster/values.yaml b/charts/chainlink-cluster/values.yaml
@@ -298,6 +298,12 @@ affinity:
 networkPolicies:
   enabled: true
 
+rbac:
+  createRoleBinding: true
+  # This assumes that a separate cluster role already exists with this name.
+  clusterRoleName: "crib-poweruser"
+  roleBindingGroupName: "eks-sso:crib-poweruser"
+
 # Configure the default network policy.
 networkPolicyDefault:
   ingress: