Merge pull request #281 from jeremyrickard/aks-chart-rbac

Update VK AKS chart to have RBAC resources

charts/virtual-kubelet-for-aks/Chart.yaml

@@ -1,5 +1,5 @@
 name: virtual-kubelet-for-aks
-version: 0.1.4
+version: 0.1.5
 description: a Helm chart to install virtual kubelet in an AKS or ACS cluster.
 sources:
   - https://github.com/virtual-kubelet/virtual-kubelet

charts/virtual-kubelet-for-aks/templates/clusterrolebinding.yaml

@@ -0,0 +1,14 @@
+{{ if .Values.rbac.install }}
+apiVersion: "rbac.authorization.k8s.io/{{ .Values.rbac.apiVersion }}"
+kind: ClusterRoleBinding
+metadata:
+  name: {{ template "fullname" . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ template "fullname" . }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ .Values.rbac.roleRef }}
+{{ end }}

charts/virtual-kubelet-for-aks/templates/deployment.yaml

@@ -56,5 +56,8 @@ spec:
         hostPath:
           path: /etc/kubernetes/azure.json
           type: File
+      {{ if .Values.rbac.install }}
+      serviceAccountName: {{ template "fullname" . }}
+      {{ end }}
       nodeSelector:
         beta.kubernetes.io/os: linux

charts/virtual-kubelet-for-aks/templates/serviceaccount.yaml

@@ -0,0 +1,6 @@
+{{ if .Values.rbac.install }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "fullname" . }}
+{{ end }}

charts/virtual-kubelet-for-aks/values.yaml

@@ -15,3 +15,11 @@ env:
   apiserverCert: 
   apiserverKey: 
   monitoredNamespace:
+
+# Install Default RBAC roles and bindings
+rbac:
+  install: true
+  ## RBAC api version
+  apiVersion: v1beta1
+  # Cluster role reference
+  roleRef: cluster-admin