awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-13 03:29:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

misc: added helm support for auto bootstrap

Browse Source
This commit is contained in:
Sheen Capadngan
2025-06-19 02:12:08 +08:00
parent 2b8220a71b
commit 3276853427
5 changed files with 201 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm-charts/infisical-standalone-postgres/templates/jobs-rbac.yaml
+31 -1
View File
@@ -39,4 +39,34 @@ subjects:
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ include "infisical.roleName" . }}
name: {{ include "infisical.roleName" . }}
---
{{- if .Values.infisical.autoBootstrap.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ include "infisical.roleName" . }}-bootstrap
namespace: {{ .Values.infisical.autoBootstrap.secretDestination.namespace | default .Release.Namespace }}
labels:
{{- include "infisical.labels" . | nindent 4 }}
rules:
- apiGroups: [""]
resources: ["secrets"]
verbs: ["get", "create", "update"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "infisical.roleBindingName" . }}-bootstrap
namespace: {{ .Values.infisical.autoBootstrap.secretDestination.namespace | default .Release.Namespace }}
labels:
{{- include "infisical.labels" . | nindent 4 }}
subjects:
- kind: ServiceAccount
name: {{ include "infisical.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ include "infisical.roleName" . }}-bootstrap
{{- end }}