fix(chart): add role on builder pod (#1027)

The builder pod always need access to the kubernetes API since it will
spawn kaniko builder pods.

Signed-off-by: Matthieu Blottière Seroux <matthieu.blottiere@owkin.com>

Author: mblottiere

charts/substra-backend/CHANGELOG.md

@@ -1,6 +1,10 @@
 # Changelog
 
 <!-- towncrier release notes start -->
+## [26.15.1] - 2025-01-06
+
+Fix missing role on builder pod
+
 ## [26.15.0] - 2024-12-16
 
 Bump app version to 1.0.0
@@ -25,7 +29,7 @@ Pods relying on redis uses a new init container `wait-redis` which wait for redi
 
 # Added
 
-`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`. 
+`.Values.builder.saveImageTimeoutSeconds` configuring the timeout for the Celery task `SaveImageTask`.
 
 ## [26.12.0] - 2024-09-30
 

charts/substra-backend/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: substra-backend
 home: https://github.com/Substra
-version: 26.15.0
+version: 26.15.1
 appVersion: 1.0.0
 kubeVersion: '>= 1.19.0-0'
 description: Main package for Substra

charts/substra-backend/templates/statefulset-builder.yaml

@@ -33,10 +33,7 @@ spec:
         app.kubernetes.io/name: {{ template "substra.name" . }}-builder
         {{ include "substra.labels" . | nindent 8 }}
         app.kubernetes.io/component: substra-builder
-        {{- if .Values.privateCa.enabled }}
-        # Needed to create the secret with the certificate
         role-api-k8s-client: 'true'
-        {{- end }}
         role-database-client: 'true'
         role-internet-egress: 'true'
         role-orchestrator-client: 'true'