fix: introduce missing Role into keptn-cert-manager helm charts (#3435)

Signed-off-by: odubajDT <ondrej.dubaj@dynatrace.com>
keptn · Apr 19, 2024 · 16afdaa · 16afdaa
1 parent fbc586b
commit 16afdaa
Show file tree

Hide file tree

Showing 13 changed files with 465 additions and 45 deletions.
diff --git a/.github/scripts/.helm-tests/certificates-only/result.yaml b/.github/scripts/.helm-tests/certificates-only/result.yaml
@@ -90,6 +90,51 @@ subjects:
   name: 'certificate-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/certManager/templates/certificate-operator-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: certificate-operator-leader-election-role
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cert-manager
+    app.kubernetes.io/version: v2.1.1
+    helm.sh/chart: cert-manager-0.2.3
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+---
 # Source: keptn/charts/certManager/templates/certificate-operator-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -140,7 +185,7 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: 'leader-election-role'
+  name: 'certificate-operator-leader-election-role'
 subjects:
 - kind: ServiceAccount
   name: 'certificate-operator'

diff --git a/.github/scripts/.helm-tests/default/result.yaml b/.github/scripts/.helm-tests/default/result.yaml
@@ -14719,6 +14719,51 @@ subjects:
   name: 'metrics-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/certManager/templates/certificate-operator-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: certificate-operator-leader-election-role
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cert-manager
+    app.kubernetes.io/version: v2.1.1
+    helm.sh/chart: cert-manager-0.2.3
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+---
 # Source: keptn/charts/certManager/templates/certificate-operator-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -14751,16 +14796,13 @@ rules:
   - patch
   - update
 ---
-# Source: keptn/charts/lifecycleOperator/templates/leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: leader-election-role
+  name: lifecycle-operator-leader-election-role
   namespace: "helmtests"
   labels:
-    app.kubernetes.io/component: rbac
-    app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -14799,13 +14841,16 @@ rules:
   - create
   - patch
 ---
-# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: lifecycle-operator-leader-election-role
+  name: keptn-scheduler-leader-election-role
   namespace: "helmtests"
   labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: scheduler
+    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -14907,7 +14952,7 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: 'leader-election-role'
+  name: 'certificate-operator-leader-election-role'
 subjects:
 - kind: ServiceAccount
   name: 'certificate-operator'
@@ -15000,6 +15045,27 @@ subjects:
   name: 'lifecycle-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: keptn-scheduler-leader-election-rolebinding
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: lifecycle-operator
+    app.kubernetes.io/version: v0.9.2
+    helm.sh/chart: lifecycle-operator-0.2.3
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: 'keptn-scheduler-leader-election-role'
+subjects:
+- kind: ServiceAccount
+  name: 'keptn-scheduler'
+  namespace: 'helmtests'
+---
 # Source: keptn/charts/metricsOperator/templates/metrics-operator-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

diff --git a/.github/scripts/.helm-tests/lifecycle-only/result.yaml b/.github/scripts/.helm-tests/lifecycle-only/result.yaml
@@ -11637,16 +11637,13 @@ subjects:
   name: 'lifecycle-operator'
   namespace: 'helmtests'
 ---
-# Source: keptn/charts/lifecycleOperator/templates/leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: leader-election-role
+  name: lifecycle-operator-leader-election-role
   namespace: "helmtests"
   labels:
-    app.kubernetes.io/component: rbac
-    app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -11685,13 +11682,16 @@ rules:
   - create
   - patch
 ---
-# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: lifecycle-operator-leader-election-role
+  name: keptn-scheduler-leader-election-role
   namespace: "helmtests"
   labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: scheduler
+    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -11793,6 +11793,27 @@ subjects:
   name: 'lifecycle-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: keptn-scheduler-leader-election-rolebinding
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: lifecycle-operator
+    app.kubernetes.io/version: v0.9.2
+    helm.sh/chart: lifecycle-operator-0.2.3
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: 'keptn-scheduler-leader-election-role'
+subjects:
+- kind: ServiceAccount
+  name: 'keptn-scheduler'
+  namespace: 'helmtests'
+---
 # Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-metrics-service.yaml
 apiVersion: v1
 kind: Service

diff --git a/.github/scripts/.helm-tests/lifecycle-with-certs/result.yaml b/.github/scripts/.helm-tests/lifecycle-with-certs/result.yaml
@@ -11728,6 +11728,51 @@ subjects:
   name: 'lifecycle-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/certManager/templates/certificate-operator-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: certificate-operator-leader-election-role
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cert-manager
+    app.kubernetes.io/version: v2.1.1
+    helm.sh/chart: cert-manager-0.2.3
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+---
 # Source: keptn/charts/certManager/templates/certificate-operator-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -11760,16 +11805,13 @@ rules:
   - patch
   - update
 ---
-# Source: keptn/charts/lifecycleOperator/templates/leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: leader-election-role
+  name: lifecycle-operator-leader-election-role
   namespace: "helmtests"
   labels:
-    app.kubernetes.io/component: rbac
-    app.kubernetes.io/created-by: certificate-operator
-    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -11808,13 +11850,16 @@ rules:
   - create
   - patch
 ---
-# Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-leader-election-rbac.yaml
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: lifecycle-operator-leader-election-role
+  name: keptn-scheduler-leader-election-role
   namespace: "helmtests"
   labels:
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: scheduler
+    app.kubernetes.io/part-of: keptn
     app.kubernetes.io/instance: keptn-test
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: lifecycle-operator
@@ -11871,7 +11916,7 @@ metadata:
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: 'leader-election-role'
+  name: 'certificate-operator-leader-election-role'
 subjects:
 - kind: ServiceAccount
   name: 'certificate-operator'
@@ -11964,6 +12009,27 @@ subjects:
   name: 'lifecycle-operator'
   namespace: 'helmtests'
 ---
+# Source: keptn/charts/lifecycleOperator/templates/scheduler-leader-election-rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: keptn-scheduler-leader-election-rolebinding
+  namespace: "helmtests"
+  labels:
+    app.kubernetes.io/instance: keptn-test
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: lifecycle-operator
+    app.kubernetes.io/version: v0.9.2
+    helm.sh/chart: lifecycle-operator-0.2.3
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: 'keptn-scheduler-leader-election-role'
+subjects:
+- kind: ServiceAccount
+  name: 'keptn-scheduler'
+  namespace: 'helmtests'
+---
 # Source: keptn/charts/lifecycleOperator/templates/lifecycle-operator-metrics-service.yaml
 apiVersion: v1
 kind: Service