Updated: helm_chart/templates/database-roles.yaml

Author: mms-build-account

helm_chart/templates/database-roles.yaml

@@ -1,58 +1,54 @@
+{{- $watchNamespace := list .Values.namespace }}
+{{- if .Values.operator.watchNamespace }}
+{{- $watchNamespace = regexSplit "," .Values.operator.watchNamespace -1 }}
+{{- end }}
+
+
+{{- range $idx, $namespace := $watchNamespace }}
+
+{{- $namespaceBlock := printf "namespace: %s" $namespace }}
+{{- if eq $namespace "*" }}
+{{- $namespaceBlock = printf "namespace: %s" $.Values.namespace }}
+{{- end }}
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-appdb
-  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-  namespace: {{ .Values.operator.watchNamespace }}
-  {{- else }}
-  namespace: {{ .Values.namespace }}
-  {{- end }}
-{{- if .Values.registry.imagePullSecrets}}
+  {{ $namespaceBlock }}
+{{- if $.Values.registry.imagePullSecrets}}
 imagePullSecrets:
-  - name: {{ .Values.registry.imagePullSecrets }}
+  - name: {{ $.Values.registry.imagePullSecrets }}
 {{- end }}
 
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-database-pods
-  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-  namespace: {{ .Values.operator.watchNamespace }}
-  {{- else }}
-  namespace: {{ .Values.namespace }}
-  {{- end }}
-{{- if .Values.registry.imagePullSecrets}}
+  {{ $namespaceBlock }}
+{{- if $.Values.registry.imagePullSecrets}}
 imagePullSecrets:
-  - name: {{ .Values.registry.imagePullSecrets }}
+  - name: {{ $.Values.registry.imagePullSecrets }}
 {{- end }}
 
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: mongodb-enterprise-ops-manager
-  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-  namespace: {{ .Values.operator.watchNamespace }}
-  {{- else }}
-  namespace: {{ .Values.namespace }}
-  {{- end }}
-{{- if .Values.registry.imagePullSecrets}}
+  {{ $namespaceBlock }}
+{{- if $.Values.registry.imagePullSecrets}}
 imagePullSecrets:
-  - name: {{ .Values.registry.imagePullSecrets }}
+  - name: {{ $.Values.registry.imagePullSecrets }}
 {{- end }}
 
 ---
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: mongodb-enterprise-appdb
-  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-  namespace: {{ .Values.operator.watchNamespace }}
-  {{- else }}
-  namespace: {{ .Values.namespace }}
-  {{- end }}
+  {{ $namespaceBlock }}
 rules:
   - apiGroups:
       - ""
@@ -74,20 +70,14 @@ kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: mongodb-enterprise-appdb
-  {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-  namespace: {{ .Values.operator.watchNamespace }}
-  {{- else }}
-  namespace: {{ .Values.namespace }}
-  {{- end }}
+  {{ $namespaceBlock }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: mongodb-enterprise-appdb
 subjects:
   - kind: ServiceAccount
     name: mongodb-enterprise-appdb
-    {{- if not (eq (.Values.operator.watchNamespace | default "*") "*") }}
-    namespace: {{ .Values.operator.watchNamespace }}
-    {{- else }}
-    namespace: {{ .Values.namespace }}
-    {{- end }}
+    {{ $namespaceBlock }}
+
+{{- end }}