Merge pull request #1 from beilin-upstream/worker-options-control-rol…

…e-and-role-binding

Worker options control role and role binding

charts/prefect-agent/README.md

@@ -81,4 +81,4 @@ Prefect Agent application bundle
 | serviceAccount.name | string | `""` | the name of the ServiceAccount to use. if not set and create is true, a name is generated using the common.names.fullname template |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0)

charts/prefect-server/README.md

@@ -197,4 +197,4 @@ No secrets are created when providing an existing secret.
 | serviceAccount.name | string | `""` | the name of the ServiceAccount to use. if not set and create is true, a name is generated using the common.names.fullname template |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0)

charts/prefect-worker/README.md

@@ -236,7 +236,9 @@ helm install prefect-worker prefect/prefect-worker -f values.yaml --set-file wor
 | fullnameOverride | string | `"prefect-worker"` | fully override common.names.fullname |
 | nameOverride | string | `""` | partially overrides common.names.name |
 | namespaceOverride | string | `""` | fully override common.names.namespace |
+| role.create | bool | `true` | specifies whether a Role should be created |
 | role.extraPermissions | list | `[]` | array with extra permissions to add to the worker role |
+| rolebinding.create | bool | `true` | specifies whether a RoleBinding should be created |
 | serviceAccount.annotations | object | `{}` | additional service account annotations (evaluated as a template) |
 | serviceAccount.create | bool | `true` | specifies whether a ServiceAccount should be created |
 | serviceAccount.name | string | `""` | the name of the ServiceAccount to use. if not set and create is true, a name is generated using the common.names.fullname template |
@@ -301,4 +303,4 @@ helm install prefect-worker prefect/prefect-worker -f values.yaml --set-file wor
 | worker.tolerations | list | `[]` | tolerations for worker pods assignment |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0)

charts/prefect-worker/templates/configmap.yaml

@@ -12,4 +12,3 @@ metadata:
 data:
   baseJobTemplate.json: {{ .Values.worker.config.baseJobTemplate | toJson }}
 {{- end }}
-

charts/prefect-worker/templates/role.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.role.create }}
 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
 kind: Role
 metadata:
@@ -22,3 +23,4 @@ rules:
 {{- if .Values.role.extraPermissions }}
 {{- include "common.tplvalues.render" (dict "value" .Values.role.extraPermissions "context" $) | nindent 0 }}
 {{- end }}
+{{- end }}

charts/prefect-worker/templates/rolebinding.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.rolebinding.create }}
 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
 kind: RoleBinding
 metadata:
@@ -20,3 +21,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ template "worker.serviceAccountName" . }}
     namespace: {{ include "common.names.namespace" . | quote }}
+{{- end }}

charts/prefect-worker/values.schema.json

@@ -590,6 +590,12 @@
       "form": true,
       "additionalProperties": false,
       "properties": {
+        "create": {
+          "type": "boolean",
+          "title": "Create",
+          "description": "create role",
+          "form": true
+        },
         "extraPermissions": {
           "type": "array",
           "title": "Extra Permissions",
@@ -598,6 +604,21 @@
         }
       }
     },
+    "rolebinding": {
+      "type": "object",
+      "title": "RoleBinding",
+      "description": "rolebinding configuration",
+      "form": true,
+      "additionalProperties": false,
+      "properties": {
+        "create": {
+          "type": "boolean",
+          "title": "Create",
+          "description": "create role binding",
+          "form": true
+        }
+      }
+    },
     "common": {
       "type": "object",
       "title": "Common",

charts/prefect-worker/values.yaml

@@ -215,6 +215,8 @@ serviceAccount:
 
 ## Role configuration
 role:
+  # -- specifies whether a Role should be created
+  create: true
   ## List of extra role permissions
   ## e.g:
   ## extraPermissions:
@@ -223,3 +225,8 @@ role:
   ##    verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
   # -- array with extra permissions to add to the worker role
   extraPermissions: []
+
+## RoleBinding configuration
+rolebinding:
+  # -- specifies whether a RoleBinding should be created
+  create: true

charts/prometheus-prefect-exporter/README.md

@@ -84,4 +84,4 @@ Shoutout to @ialejandro for the original work on this chart!
 | tolerations | list | `[]` | Tolerations for pod assignment |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.12.0](https://github.com/norwoodj/helm-docs/releases/v1.12.0)

charts/prometheus-prefect-exporter/templates/tests/test-connection.yaml

@@ -14,4 +14,4 @@ spec:
       command: ['wget']
       args: ['{{ include "prometheus-prefect-exporter.fullname" . }}:{{ .Values.service.targetPort | default .Values.service.port }}']
   restartPolicy: Never
-{{- end }}
+{{- end }}

charts/prometheus-prefect-exporter/values.schema.json

@@ -313,4 +313,4 @@
       "form": true
     }
   }
-}
+}