diff --git a/charts/clearml/templates/apps-rbac.yaml b/charts/clearml/templates/apps-rbac.yaml index 155d9b1..18a8a4e 100644 --- a/charts/clearml/templates/apps-rbac.yaml +++ b/charts/clearml/templates/apps-rbac.yaml @@ -31,3 +31,33 @@ roleRef: name: {{ include "clearmlApplications.referenceName" . }}-kpa {{- end }} {{- end }} +{{- range .Values.enterpriseFeatures.clearmlApplications.additionalClusterRoleBindings }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "clearmlApplications.referenceName" $ }}-kpa-{{ . }} +subjects: + - kind: ServiceAccount + name: "clearml-apps-sa" + namespace: {{ $.Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ . }} +{{- end }} +{{- range .Values.enterpriseFeatures.clearmlApplications.additionalRoleBindings }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "clearmlApplications.referenceName" $ }}-kpa-{{ . }} +subjects: + - kind: ServiceAccount + name: "clearml-apps-sa" + namespace: {{ $.Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ . }} +{{- end }} diff --git a/charts/clearml/values.yaml b/charts/clearml/values.yaml index 491eb9b..ed07c1b 100644 --- a/charts/clearml/values.yaml +++ b/charts/clearml/values.yaml @@ -431,6 +431,11 @@ enterpriseFeatures: replicaCount: 1 # -- APPS extra envrinoment variables extraEnvs: [] + additionalClusterRoleBindings: [] + # - privileged + # -- additional existing RoleBindings + additionalRoleBindings: [] + # - privileged # -- file definition fileMounts: [] # -- specific annotation for APPS pods