added policyPriorities

kyverno · Mar 16, 2021 · 76a3c12 · 76a3c12
1 parent 95550bc
commit 76a3c12
Show file tree

Hide file tree

Showing 3 changed files with 33 additions and 0 deletions.
diff --git a/charts/policy-reporter/templates/role.yaml b/charts/policy-reporter/templates/role.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.policyPriorities.enabled -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "policyreporter.fullname" . }}
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+{{- end }}
diff --git a/charts/policy-reporter/templates/rolebinding.yaml b/charts/policy-reporter/templates/rolebinding.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.policyPriorities.enabled -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "policyreporter.fullname" . }}
+roleRef:
+  kind: Role
+  name: {{ include "policyreporter.fullname" . }}
+  apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: "ServiceAccount"
+  name: {{ include "policyreporter.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
+{{- end }}
diff --git a/charts/policy-reporter/values.yaml b/charts/policy-reporter/values.yaml
@@ -83,6 +83,10 @@ global:
 api:
   enabled: false
 
+# Policy Priorities
+policyPriorities:
+  enabled: false
+
 loki:
   # loki host address
   host: ""