fix: optimize helm script

helm/streampark/templates/ingress.yaml

@@ -38,4 +38,10 @@ spec:
                   name: {{ .Values.spec.name }}
             path: {{ .Values.ingress.path }}
             pathType: {{ .Values.ingress.pathType }}
-{{- end }}
+{{- if .Values.ingress.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.host }}
+      secretName: {{ .Values.ingress.tls.tlsSecretName }}
+{{- end }}
+{{- end }}

helm/streampark/templates/rbac.yaml

@@ -44,8 +44,8 @@ rules:
 {{/*
 Namespaced scoped RBAC.
 */}}
-{{- if .Values.watchNamespaces }}
-{{- range .Values.watchNamespaces }}
+{{- if .Values.rbac.watchNamespaces }}
+{{- range .Values.rbac.watchNamespaces }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -71,6 +71,22 @@ subjects:
     name: {{ include "streampark.serviceAccountName" $ }}
     namespace: {{ $.Release.Namespace }}
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: streampark-flink-role-binding-default
+  namespace: {{ . }}
+  labels:
+    {{- include "streampark.labels" $ | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: edit
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: {{ . }}
+---
 {{- end }}
 {{ else }}
 {{/*
@@ -101,5 +117,18 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "streampark.serviceAccountName" . }}
     namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: streampark-flink-role-binding-default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: edit
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: {{ .Release.Namespace }}
 {{- end }}
 {{- end }}

helm/streampark/templates/streampark.yml

@@ -60,7 +60,6 @@ spec:
             {{- toYaml .Values.spec.container.env | nindent 12 }}
           securityContext:
             privileged: false
-          command: ["bash","-c","bash ./bin/streampark.sh start_docker"]
           {{- if .Values.spec.livenessProbe.enabled }}
           livenessProbe:
             httpGet:
@@ -94,6 +93,9 @@ spec:
           volumeMounts:
             - name: streampark-default-config-volume
               mountPath: /streampark/conf
+            {{- if .Values.spec.volumeMounts }}
+            {{ toYaml .Values.spec.volumeMounts | trim | nindent 12 }}
+            {{- end }}
           resources:
           {{- toYaml .Values.spec.resources | nindent 12 }}
       volumes:
@@ -105,3 +107,6 @@ spec:
                 path: config.yaml
               - key: logback-spring.xml
                 path: logback-spring.xml
+        {{- if .Values.spec.volumes }}
+        {{ toYaml .Values.spec.volumes | trim | nindent 8 }}
+        {{- end }}

helm/streampark/values.yaml

@@ -15,9 +15,6 @@
 # limitations under the License.
 #
 
-# When enabled RBAC is only created for said namespaces, otherwise it is done for the cluster scope.
-# watchNamespaces: ["streampark"]
-
 image:
   repository: "apache/streampark"
   pullPolicy: "IfNotPresent"
@@ -26,6 +23,8 @@ image:
 
 rbac:
   create: true
+  ## When enabled RBAC is only created for said namespaces, otherwise it is done for the cluster scope.
+#  watchNamespaces: ["streampark"]
 
 spec:
   container:
@@ -107,6 +106,9 @@ spec:
     failureThreshold: "3"
     successThreshold: "1"
 
+  volumeMounts: []
+  volumes: []
+
 ingress:
   enabled: true
   host: "streampark.apache.org"
@@ -120,6 +122,10 @@ ingress:
     nginx.ingress.kubernetes.io/configuration-snippet: 'rewrite ^(/streampark)$ $1/ permanent;',
     kubernetes.io/ingress.class: "nginx"
   }
+  tls:
+    enabled: false
+    ## Secret that contains the TLS certificate
+    tlsSecretName: streampark-tls-secret
 
 service:
   ## type determines how the Service is exposed. Defaults to ClusterIP. Valid options are ExternalName, ClusterIP, NodePort, and LoadBalancer