summaryrefslogtreecommitdiff
path: root/astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml')
-rw-r--r--astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml27
1 files changed, 27 insertions, 0 deletions
diff --git a/astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml b/astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml
new file mode 100644
index 0000000..9e8259f
--- /dev/null
+++ b/astroshop-platform/argocd-helmchart/templates/redis-secret-init/role.yaml
@@ -0,0 +1,27 @@
+{{- if and .Values.redisSecretInit.enabled (not .Values.externalRedis.host) }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+ annotations:
+ "helm.sh/hook": pre-install,pre-upgrade
+ "helm.sh/hook-delete-policy": before-hook-creation
+ labels:
+ {{- include "argo-cd.labels" (dict "context" . "component" .Values.redisSecretInit.name "name" .Values.redisSecretInit.name) | nindent 4 }}
+ name: {{ include "argo-cd.redisSecretInit.fullname" . }}
+ namespace: {{ include "argo-cd.namespace" . | quote }}
+rules:
+ - apiGroups:
+ - ""
+ resources:
+ - secrets
+ resourceNames:
+ - argocd-redis
+ verbs:
+ - get
+ - apiGroups:
+ - ""
+ resources:
+ - secrets
+ verbs:
+ - create
+{{- end }}