pod-cleanup-rolebinding.yaml 1.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. # Licensed to the Apache Software Foundation (ASF) under one
  2. # or more contributor license agreements. See the NOTICE file
  3. # distributed with this work for additional information
  4. # regarding copyright ownership. The ASF licenses this file
  5. # to you under the Apache License, Version 2.0 (the
  6. # "License"); you may not use this file except in compliance
  7. # with the License. You may obtain a copy of the License at
  8. #
  9. # http://www.apache.org/licenses/LICENSE-2.0
  10. #
  11. # Unless required by applicable law or agreed to in writing,
  12. # software distributed under the License is distributed on an
  13. # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
  14. # KIND, either express or implied. See the License for the
  15. # specific language governing permissions and limitations
  16. # under the License.
  17. ################################
  18. ## Airflow Cleanup Role Binding
  19. #################################
  20. {{- if and .Values.rbac.create .Values.cleanup.enabled }}
  21. kind: RoleBinding
  22. apiVersion: rbac.authorization.k8s.io/v1
  23. metadata:
  24. name: {{ .Release.Name }}-cleanup-rolebinding
  25. labels:
  26. tier: airflow
  27. release: {{ .Release.Name }}
  28. chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
  29. heritage: {{ .Release.Service }}
  30. {{- with .Values.labels }}
  31. {{ toYaml . | indent 4 }}
  32. {{- end }}
  33. roleRef:
  34. apiGroup: rbac.authorization.k8s.io
  35. kind: Role
  36. name: {{ .Release.Name }}-cleanup-role
  37. subjects:
  38. - kind: ServiceAccount
  39. name: {{ include "cleanup.serviceAccountName" . }}
  40. namespace: "{{ .Release.Namespace }}"
  41. {{- end }}