mirror of
https://github.com/bjw-s-labs/helm-charts.git
synced 2025-07-04 00:47:04 +02:00
a01a89cb13
Co-authored-by: lab-assistant[bot] <180935599+lab-assistant[bot]@users.noreply.github.com>
24 lines
1.5 KiB
Smarty
24 lines
1.5 KiB
Smarty
{{/*
|
|
Renders the serviceAccount object required by the chart.
|
|
*/}}
|
|
{{- define "bjw-s.common.render.serviceAccount" -}}
|
|
{{- $rootContext := $ -}}
|
|
|
|
{{- /* Generate named serviceAccounts as required */ -}}
|
|
{{- $enabledServiceAccounts := (include "bjw-s.common.lib.serviceAccount.enabledServiceAccounts" (dict "rootContext" $rootContext) | fromYaml ) -}}
|
|
{{- range $identifier := keys $enabledServiceAccounts -}}
|
|
{{- /* Generate object from the raw serviceAccount values */ -}}
|
|
{{- $serviceAccountObject := (include "bjw-s.common.lib.serviceAccount.getByIdentifier" (dict "rootContext" $rootContext "id" $identifier) | fromYaml) -}}
|
|
|
|
{{- /* Perform validations on the ServiceAccount before rendering */ -}}
|
|
{{- include "bjw-s.common.lib.serviceAccount.validate" (dict "rootContext" $rootContext "object" $serviceAccountObject) -}}
|
|
|
|
{{- /* Create a service account secret */ -}}
|
|
{{- if $serviceAccountObject.staticToken -}}
|
|
{{- $_ := set $rootContext.Values.secrets (printf "%s-sa-token" $serviceAccountObject.identifier) (dict "suffix" (printf "%s-sa-token" $serviceAccountObject.identifier) "annotations" (dict "kubernetes.io/service-account.name" $serviceAccountObject.name) "type" "kubernetes.io/service-account-token") -}}
|
|
{{- end -}}
|
|
|
|
{{- /* Include the ServiceAccount class */ -}}
|
|
{{- include "bjw-s.common.class.serviceAccount" (dict "rootContext" $rootContext "object" $serviceAccountObject) | nindent 0 -}}
|
|
{{- end -}}
|
|
{{- end -}}
|