Skip to content

Commit 737bd10

Browse files
committed
Create Values.frontend.createRoleBinding to allow it to be disabled
1 parent 449e570 commit 737bd10

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

charts/sourcegraph/templates/frontend/sourcegraph-frontend.RoleBinding.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
{{- if .Values.frontend.createRoleBinding }}
12
apiVersion: rbac.authorization.k8s.io/v1
23
kind: RoleBinding
34
metadata:
@@ -21,3 +22,4 @@ subjects:
2122
- kind: ServiceAccount
2223
name: {{ include "sourcegraph.serviceAccountName" (list . "frontend") }}
2324
namespace: {{ .Release.Namespace }}
25+
{{- end }}

charts/sourcegraph/values.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -326,6 +326,8 @@ frontend:
326326
runAsUser: 100
327327
runAsGroup: 101
328328
readOnlyRootFilesystem: true
329+
# -- Disable the roleBinding resource for deployment environments blocking RBAC, ex. OpenShift's default "secure" SCC
330+
createRoleBinding: true
329331
# -- Security context for the `frontend` pod,
330332
# learn more from the [Kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod)
331333
podSecurityContext: {}

0 commit comments

Comments
 (0)