fix(udash-agent): correctly set service account (#32)

Signed-off-by: Olivier Vernin <olivier@vernin.me>

Author: olblak

charts/udash-agent/Chart.yaml

@@ -4,4 +4,4 @@ description: Udash Agent, is the Updatecli DASHboard agent running Updatecli to
 icon: https://www.updatecli.io/images/updatecli_transparent.png
 name: udash-agent
 type: application
-version: 0.16.0
+version: 0.16.1

charts/udash-agent/templates/argoworkflow.yaml

@@ -3,6 +3,7 @@ kind: WorkflowTemplate
 metadata:
   name: run-updatecli-diff
 spec:
+  serviceAccountName: updatecli-workflow-sa
   entrypoint: main
   arguments:
     parameters:
@@ -45,40 +46,37 @@ spec:
               - git-clone
             command: [sh, -c]
             env:
-            # {{- range $env, $value := $.Values.secrets.agent.environments }}
+              # {{- range $env, $value := $.Values.secrets.agent.environments }}
               - name: "{{ $env }}"
                 valueFrom:
                   secretKeyRef:
                     name: '{{ include "udash.secretName" $ }}'
                     key: "{{ $env }}"
             # {{- end }}
-            resources:
-              {{- toYaml $.Values.resources | nindent 14 }}
+            resources: {{ - toYaml $.Values.resources | nindent 14 }}
             args:
               - |
                 cd /workspace
                 updatecli udash login --experimental --api-url http://agentrelay/api {{ default "agentrelay" (include "udash.host" . )}};
                 updatecli compose diff --experimental --file /workspace/{{ "{{" }} inputs.parameters.updatecli-compose-file {{ "}}" }};
                 updatecli udash logout --experimental {{ default "agentrelay " (include "udash.host" .)}};
 ---
-
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: updatecli-workflow-sa
 ---
-
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: updatecli-workflow-role
 rules:
   - apiGroups: [""]
-    resources: ["pods", "pods/log", "persistentvolumeclaims"]
+    resources: ["pods", "persistentvolumeclaims"]
     verbs: ["create", "get", "watch", "list", "delete"]
   - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
+    resources: ["pods/log"]
+    verbs: ["get", "watch"]
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get"]
@@ -107,7 +105,7 @@ kind: CronWorkflow
 metadata:
   name: cron-run-updatecli-diff-{{ $id }}
 spec:
-  schedule: '{{ $workflow.schedule | default $.Values.defaultSchedule }}'
+  schedule: "{{ $workflow.schedule | default $.Values.defaultSchedule }}"
   timezone: "UTC"
   successfulJobsHistoryLimit: 1
   failedJobsHistoryLimit: 1
@@ -119,9 +117,9 @@ spec:
     arguments:
       parameters:
         - name: repo-url
-          value: {{ $workflow.url }}
+          value: {{$workflow.url}}
         - name: repo-branch
-          value: {{ $workflow.branch }}
+          value: {{$workflow.branch}}
         - name: updatecli-compose-file
-          value: {{ $workflow.composefile }}
+          value: {{$workflow.composefile}}
 #{{ end }}