Patrice Ferlet
f9fd6332d6
Make possible to declare cronTabs inside docker-compose file. ⇒ Also, add multiple compose file injection with `-c` arguments ⇒ Also, fixes “ignore depends on” for same pod ⇒ Also fixes * fix [Be able to specify compose.yml files and its override #21](https://github.com/metal3d/katenary/issues/21) * fix [Be able to ignore ports to expose in a katenary.io/ports list #16](https://github.com/metal3d/katenary/issues/16) And more fixes… (later, we will use branches in a better way, that was a hard, long fix process)
45 lines
1.0 KiB
Go
45 lines
1.0 KiB
Go
package helm
|
|
|
|
type RoleRef struct {
|
|
Kind string `yaml:"kind"`
|
|
Name string `yaml:"name"`
|
|
APIGroup string `yaml:"apiGroup"`
|
|
}
|
|
|
|
type Subject struct {
|
|
Kind string `yaml:"kind"`
|
|
Name string `yaml:"name"`
|
|
Namespace string `yaml:"namespace"`
|
|
}
|
|
|
|
type RoleBinding struct {
|
|
*K8sBase `yaml:",inline"`
|
|
RoleRef RoleRef `yaml:"roleRef,omitempty"`
|
|
Subjects []Subject `yaml:"subjects,omitempty"`
|
|
}
|
|
|
|
func NewRoleBinding(name string, user *ServiceAccount, role *Role) *RoleBinding {
|
|
rb := &RoleBinding{
|
|
K8sBase: NewBase(),
|
|
}
|
|
|
|
rb.K8sBase.Kind = "RoleBinding"
|
|
rb.K8sBase.Metadata.Name = ReleaseNameTpl + "-" + name + "-cron-allow"
|
|
rb.K8sBase.ApiVersion = "rbac.authorization.k8s.io/v1"
|
|
rb.K8sBase.Metadata.Labels[K+"/component"] = name
|
|
|
|
rb.RoleRef.Kind = "Role"
|
|
rb.RoleRef.Name = role.Metadata.Name
|
|
rb.RoleRef.APIGroup = "rbac.authorization.k8s.io"
|
|
|
|
rb.Subjects = []Subject{
|
|
{
|
|
Kind: "ServiceAccount",
|
|
Name: user.Metadata.Name,
|
|
Namespace: "{{ .Release.Namespace }}",
|
|
},
|
|
}
|
|
|
|
return rb
|
|
}
|