feat(aaw-financial-data-reconciliation): added service account (#464)

* feat(aaw-financial-data-reconciliation): added clusterrole and service account --------- Co-authored-by: Mathis Marcotte <[email protected]>
StatCan · Apr 18, 2024 · 6e4b2cf · 6e4b2cf
1 parent 5193efe
commit 6e4b2cf
Show file tree

Hide file tree

Showing 5 changed files with 33 additions and 1 deletion.
diff --git a/stable/aaw-financial-data-reconciliation-application/Chart.yaml b/stable/aaw-financial-data-reconciliation-application/Chart.yaml
@@ -2,12 +2,14 @@ apiVersion: v1
 appVersion: "1.0"
 description: A Helm chart for AAW Financial Data Reconciliation
 name: aaw-financial-data-reconciliation
-version: 0.1.6
+version: 0.1.7
 home: https://statcan.gc.ca
 icon: https://www.python.org/static/img/python-logo
 sources:
 - https://github.com/StatCan/aaw-financial-data-reconciliation
 maintainers:
   - name: Marc-André Ménard
     email: [email protected]
+  - name: Mathis Marcotte
+    email: [email protected]
 engine: gotpl
diff --git a/stable/aaw-financial-data-reconciliation-application/templates/clusterrole-binding.yaml b/stable/aaw-financial-data-reconciliation-application/templates/clusterrole-binding.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: aaw-financial-data-reconciliation
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: aaw-financial-data-reconciliation
+subjects:
+- kind: ServiceAccount
+  name: aaw-financial-data-reconciliation
+  namespace: org-ces-system
diff --git a/stable/aaw-financial-data-reconciliation-application/templates/clusterrole.yaml b/stable/aaw-financial-data-reconciliation-application/templates/clusterrole.yaml
@@ -0,0 +1,13 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: aaw-financial-data-reconciliation
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
+  - list
+  - watch
diff --git a/stable/aaw-financial-data-reconciliation-application/templates/cronjob.yaml b/stable/aaw-financial-data-reconciliation-application/templates/cronjob.yaml
@@ -17,6 +17,7 @@ spec:
             app.kubernetes.io/name: aaw-app.name
             app.kubernetes.io/instance: {{ .Release.Name }}
         spec:
+          serviceAccountName: aaw-financial-data-reconciliation
           containers:
           - name: aaw-financial-data-reconciliation-job
             image: "{{ .Values.appImage.repository }}:{{ .Values.appImage.tag }}"

diff --git a/stable/aaw-financial-data-reconciliation-application/templates/service-account.yaml b/stable/aaw-financial-data-reconciliation-application/templates/service-account.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: aaw-financial-data-reconciliation