fix(chart): controller and user rbac (#4)

Author: raffis

chart/k8sgrowthbook-controller/Chart.yaml

@@ -15,4 +15,4 @@ keywords:
 name: k8sgrowthbook-controller
 sources:
 - https://github.com/DoodleScheduling/k8sgrowthbook-controller
-version: 0.0.3
+version: 0.0.5

chart/k8sgrowthbook-controller/templates/clusterrole-edit.yaml

@@ -14,7 +14,19 @@ metadata:
     {{- toYaml .Values.annotations | nindent 4 }}
 rules:
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookclients
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
   - growthbookfeatures
   verbs:
@@ -26,9 +38,47 @@ rules:
   - update
   - watch
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookinstances
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookinstances/status
+  verbs:
+  - get
+  - patch
+  - update
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookorganizations
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
-  - growthbookfeatures/status
+  - growthbookusers
   verbs:
+  - create
+  - delete
   - get
+  - list
+  - patch
+  - update
+  - watch
 {{- end }}

chart/k8sgrowthbook-controller/templates/clusterrole-view.yaml

@@ -13,17 +13,49 @@ metadata:
     {{- toYaml .Values.annotations | nindent 4 }}
 rules:
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookclients
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
   - growthbookfeatures
   verbs:
   - get
   - list
   - watch
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookinstances
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
-  - growthbookfeatures/status
+  - growthbookinstances/status
   verbs:
   - get
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookorganizations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookusers
+  verbs:
+  - get
+  - list
+  - watch
 {{- end }}

chart/k8sgrowthbook-controller/templates/clusterrole.yaml

@@ -14,13 +14,32 @@ rules:
 - apiGroups:
   - ""
   resources:
-    - services
+  - events
   verbs:
-    - get
-    - list
-    - watch
+  - create
+  - patch
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookclients
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
   - growthbookfeatures
   verbs:
@@ -32,17 +51,41 @@ rules:
   - update
   - watch
 - apiGroups:
-  - "growthbook.infra.doodle.com"
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookinstances
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
   resources:
-  - growthbookfeatures/status
+  - growthbookinstances/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
-  - ""
+  - growthbook.infra.doodle.com
   resources:
-  - events
+  - growthbookorganizations
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - growthbook.infra.doodle.com
+  resources:
+  - growthbookusers
   verbs:
   - create
   - delete

chart/k8sgrowthbook-controller/templates/role.yaml

@@ -35,4 +35,4 @@ rules:
       - create
       - delete
       - update
-      - get
+      - get

chart/k8sgrowthbook-controller/templates/service.yaml

@@ -41,7 +41,6 @@ podAnnotations: {}
 
 metricsPort: "9556"
 probesPort: "9557"
-httpPort: "8080"
 
 # Change the metrics path
 metricsPath: /metrics
@@ -93,11 +92,6 @@ podSecurityContext:
   runAsNonRoot: true
   runAsUser: 10000
 
-service:
-  labels: {}
-  annotations: {}
-  type: ClusterIP
-
 serviceAccount:
   create: true
   # If create is true and name is not set, then a name is generated using the