fix: operator should have the same permissions as the plugins

undistro · Jul 24, 2023 · c1c5701 · c1c5701
1 parent 37227d5
commit c1c5701
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 10 deletions.
diff --git a/charts/zora/Chart.yaml b/charts/zora/Chart.yaml
@@ -17,7 +17,7 @@ name: zora
 description: Zora scans multiple Kubernetes clusters and reports potential issues.
 icon: https://zora-docs.undistro.io/assets/logo.png
 type: application
-version: 0.7.0-rc1
-appVersion: "v0.7.0-rc1"
+version: 0.7.0-rc2
+appVersion: "v0.7.0-rc2"
 sources:
   - https://github.com/undistro/zora
diff --git a/charts/zora/README.md b/charts/zora/README.md
@@ -1,6 +1,6 @@
 # Zora Helm Chart
 
-![Version: 0.7.0-rc1](https://img.shields.io/badge/Version-0.7.0--rc1-informational?style=flat-square&color=3CA9DD) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square&color=3CA9DD) ![AppVersion: v0.7.0-rc1](https://img.shields.io/badge/AppVersion-v0.7.0--rc1-informational?style=flat-square&color=3CA9DD)
+![Version: 0.7.0-rc2](https://img.shields.io/badge/Version-0.7.0--rc2-informational?style=flat-square&color=3CA9DD) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square&color=3CA9DD) ![AppVersion: v0.7.0-rc2](https://img.shields.io/badge/AppVersion-v0.7.0--rc2-informational?style=flat-square&color=3CA9DD)
 
 Zora scans multiple Kubernetes clusters and reports potential issues.
 
@@ -12,7 +12,7 @@ To install the chart with the release name `zora`:
 helm repo add undistro https://charts.undistro.io --force-update
 helm upgrade --install zora undistro/zora \
   -n zora-system \
-  --version 0.7.0-rc1 \
+  --version 0.7.0-rc2 \
   --create-namespace --wait
 ```
 
@@ -55,7 +55,7 @@ The following table lists the configurable parameters of the Zora chart and thei
 | nameOverride | string | `""` | String to partially override fullname template with a string (will prepend the release name) |
 | fullnameOverride | string | `""` | String to fully override fullname template with a string |
 | agent | bool | `false` | Specifies whether Zora should be installed in `agent` mode |
-| clusterName | string | `""` | Cluster name |
+| clusterName | string | `""` | Cluster name. Required if `agent` is `true`. Should be set by `kubectl config current-context`. |
 | scanSchedule | string | Cron expression for every hour at the current minute + 5 minutes | Cluster scan schedule in Cron format |
 | saas.workspaceID | string | `""` | Your SaaS workspace ID |
 | saas.server | string | `"https://zora-dashboard.undistro.io"` | SaaS server URL |

diff --git a/charts/zora/templates/plugins/rbac.yaml b/charts/zora/templates/plugins/rbac.yaml
@@ -87,13 +87,12 @@ roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: zora-plugins
-{{- if $crb }}
 subjects:
+  - kind: ServiceAccount
+    name: {{ include "zora.operatorServiceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
   {{- range $s := $crb.subjects }}
   - kind: {{ $s.kind }}
     name: {{ $s.name }}
     namespace: {{ $s.namespace }}
   {{- end }}
-{{- else }}
-subjects: []
-{{- end }}
diff --git a/charts/zora/values.yaml b/charts/zora/values.yaml
@@ -20,7 +20,7 @@ fullnameOverride: ""
 # -- Specifies whether Zora should be installed in `agent` mode
 agent: false
 
-# -- Cluster name
+# -- Cluster name. Required if `agent` is `true`. Should be set by `kubectl config current-context`.
 clusterName: ""
 
 # -- Cluster scan schedule in Cron format