cadvisor clusterrole and clusterrolebinding only necessary if using podsecuritypolicy (#217)

beyang · web-flow · commit a8cf89748310 · 2022-12-04T18:06:40.000-07:00
diff --git a/charts/sourcegraph/templates/cadvisor/cadvisor.ClusterRole.yaml b/charts/sourcegraph/templates/cadvisor/cadvisor.ClusterRole.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.cadvisor.enabled -}}
+{{- if and .Values.cadvisor.enabled .Values.cadvisor.podSecurityPolicy.enabled  -}}
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
diff --git a/charts/sourcegraph/templates/cadvisor/cadvisor.ClusterRoleBinding.yaml b/charts/sourcegraph/templates/cadvisor/cadvisor.ClusterRoleBinding.yaml
@@ -1,4 +1,4 @@
-{{- if .Values.cadvisor.enabled -}}
+{{- if and .Values.cadvisor.enabled .Values.cadvisor.podSecurityPolicy.enabled  -}}
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-{{- if .Values.cadvisor.enabled -}}`
	`1`	`+{{- if and .Values.cadvisor.enabled .Values.cadvisor.podSecurityPolicy.enabled -}}`
`2`	`2`	`kind: ClusterRole`
`3`	`3`	`apiVersion: rbac.authorization.k8s.io/v1`
`4`	`4`	`metadata:`