fix: Remove cluster admin ClusterRoleBinding and ServiceAccount

This commit removes the `ClusterRoleBinding` and `ServiceAccount` from
the helm chart. The cluster admin access is not needed by the locust
service, since it just executes locust without any need to access any
resources within the kubernetes cluster.

fixes keptn-sandbox#23

helm/templates/_helpers.tpl

@@ -51,13 +51,3 @@ app.kubernetes.io/name: {{ include "keptn-service.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
-{{/*
-Create the name of the service account to use
-*/}}
-{{- define "keptn-service.serviceAccountName" -}}
-{{- if .Values.serviceAccount.create }}
-{{- default (include "keptn-service.fullname" .) .Values.serviceAccount.name }}
-{{- else }}
-{{- default "default" .Values.serviceAccount.name }}
-{{- end }}
-{{- end }}

helm/templates/deployment.yaml

@@ -23,7 +23,7 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
-      serviceAccountName: {{ include "keptn-service.serviceAccountName" . }}
+      serviceAccountName: {{ .Values.keptnservice.serviceAccountName }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:

helm/values.yaml

@@ -5,6 +5,7 @@ keptnservice:
     tag: "dev"                                    # Container Tag
   service:
     enabled: true                              # Creates a Kubernetes Service for the locust-service
+  serviceAccountName: default
 
 distributor:
   stageFilter: ""                            # Sets the stage this helm service belongs to
@@ -25,11 +26,6 @@ remoteControlPlane:
 
 imagePullSecrets: []                         # Secrets to use for container registry credentials
 
-serviceAccount:
-  create: true                               # Enables the service account creation
-  annotations: {}                            # Annotations to add to the service account
-  name: ""                                   # The name of the service account to use.
-
 podAnnotations: {}                           # Annotations to add to the created pods
 
 podSecurityContext: {}                       # Set the pod security context (e.g. fsGroups)