change openshift-oauth-proxy chart to be scoped to namespace

Author: trevorbox

charts/openshift-oauth-proxy/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.1.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/openshift-oauth-proxy/templates/deployment.yaml

@@ -40,8 +40,7 @@ spec:
             - '-http-address='
             - '-email-domain=*'
             - '-upstream={{ .Values.upstream }}'
-            - '-openshift-sar={"resource": "namespaces", "verb": "get"}'
-            - '-openshift-delegate-urls={"/": {"resource": "namespaces", "verb": "get"}}'
+            - {{ printf "-openshift-sar={\"resource\": \"namespaces\", \"namespace\": \"%v\", \"verb\": \"get\", \"resourceName\":\"%v\"}" .Release.Namespace .Release.Namespace | squote }}
             - '-tls-cert=/etc/tls/private/tls.crt'
             - '-tls-key=/etc/tls/private/tls.key'
             - '-client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token'