| Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 1 | {{- $isSimpleScalable := eq (include "loki.deployment.isScalable" .) "true" -}} |
| 2 | {{- if and $isSimpleScalable (not .Values.rbac.namespaced) }} |
| Giovanni Tirloni | 59219b6 | 2024-04-09 14:50:25 -0300 | [diff] [blame] | 3 | kind: ClusterRoleBinding |
| 4 | apiVersion: rbac.authorization.k8s.io/v1 |
| 5 | metadata: |
| 6 | name: {{ template "loki.fullname" . }}-clusterrolebinding |
| 7 | labels: |
| 8 | {{- include "loki.labels" . | nindent 4 }} |
| 9 | {{- with .Values.annotations }} |
| 10 | annotations: |
| 11 | {{ toYaml . | indent 4 }} |
| 12 | {{- end }} |
| 13 | subjects: |
| 14 | - kind: ServiceAccount |
| 15 | name: {{ template "loki.serviceAccountName" . }} |
| 16 | namespace: {{ .Release.Namespace }} |
| 17 | roleRef: |
| 18 | kind: ClusterRole |
| 19 | {{- if (not .Values.rbac.useExistingRole) }} |
| 20 | name: {{ template "loki.fullname" . }}-clusterrole |
| 21 | {{- else }} |
| 22 | name: {{ .Values.rbac.useExistingRole }} |
| 23 | {{- end }} |
| 24 | apiGroup: rbac.authorization.k8s.io |
| Mohammed Naser | 65cda13 | 2024-05-02 14:34:08 -0400 | [diff] [blame] | 25 | {{- end -}} |