chore: move rbac to separated files

ariga · Aug 22, 2023 · 7a440d1 · 7a440d1
1 parent cc163ca
commit 7a440d1
Show file tree

Hide file tree

Showing 2 changed files with 55 additions and 54 deletions.
diff --git a/charts/atlas-operator/templates/leader-election-rbac.yaml b/charts/atlas-operator/templates/leader-election-rbac.yaml
@@ -0,0 +1,54 @@
+{{- if .Values.rbac.create -}}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "atlas-operator.leaderElectionRole" . }}
+  labels:
+    {{- include "atlas-operator.labels" . | nindent 4 }}
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - coordination.k8s.io
+    resources:
+      - leases
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "atlas-operator.leaderElectionRole" . }}-binding
+  labels:
+    {{- include "atlas-operator.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "atlas-operator.leaderElectionRole" . }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "atlas-operator.serviceAccountName" . }}
+{{- end }}
diff --git a/charts/atlas-operator/templates/rbac.yaml → ...tlas-operator/templates/manager-rbac.yaml b/charts/atlas-operator/templates/rbac.yaml → ...tlas-operator/templates/manager-rbac.yaml
@@ -1,44 +1,5 @@
 {{- if .Values.rbac.create -}}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: {{ include "atlas-operator.leaderElectionRole" . }}
-  labels:
-    {{- include "atlas-operator.labels" . | nindent 4 }}
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - configmaps
-    verbs:
-      - get
-      - list
-      - watch
-      - create
-      - update
-      - patch
-      - delete
-  - apiGroups:
-      - coordination.k8s.io
-    resources:
-      - leases
-    verbs:
-      - get
-      - list
-      - watch
-      - create
-      - update
-      - patch
-      - delete
-  - apiGroups:
-      - ""
-    resources:
-      - events
-    verbs:
-      - create
-      - patch
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: {{ include "atlas-operator.managerRoleName" . }}
@@ -121,20 +82,6 @@ rules:
       - update
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: {{ include "atlas-operator.leaderElectionRole" . }}-binding
-  labels:
-    {{- include "atlas-operator.labels" . | nindent 4 }}
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ include "atlas-operator.leaderElectionRole" . }}
-subjects:
-  - kind: ServiceAccount
-    name: {{ include "atlas-operator.serviceAccountName" . }}
----
-apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: {{ include "atlas-operator.managerRoleName" . }}-binding
@@ -148,4 +95,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "atlas-operator.serviceAccountName" . }}
     namespace: {{ .Release.Namespace }}
-{{- end }}
+{{- end }}