File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11apiVersion : v1
22name : dynamodb-chart
33description : A Helm chart for the ACK service controller for Amazon DynamoDB (DynamoDB)
4- version : 1.2.6
5- appVersion : 1.2.6
4+ version : 1.2.7
5+ appVersion : 1.2.7
66home : https://github.com/aws-controllers-k8s/dynamodb-controller
77icon : https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
88sources :
Original file line number Diff line number Diff line change @@ -161,10 +161,10 @@ spec:
161161 description : ' Kind of the referent. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
162162 type : string
163163 name :
164- description : ' Name of the referent. More info: http ://kubernetes.io/docs/user-guide/identifiers #names'
164+ description : ' Name of the referent. More info: https ://kubernetes.io/docs/concepts/overview/working-with-objects/names #names'
165165 type : string
166166 uid :
167- description : ' UID of the referent. More info: http ://kubernetes.io/docs/user-guide/identifiers #uids'
167+ description : ' UID of the referent. More info: https ://kubernetes.io/docs/concepts/overview/working-with-objects/names #uids'
168168 type : string
169169 required :
170170 - apiVersion
Original file line number Diff line number Diff line change 11{{ .Chart.Name }} has been installed.
2- This chart deploys "public.ecr.aws/aws-controllers-k8s/dynamodb-controller:1.2.6 ".
2+ This chart deploys "public.ecr.aws/aws-controllers-k8s/dynamodb-controller:1.2.7 ".
33
44Check its status by running:
55 kubectl --namespace {{ .Release.Namespace }} get pods -l "app.kubernetes.io/instance={{ .Release.Name }}"
Original file line number Diff line number Diff line change @@ -46,3 +46,134 @@ If release name contains chart name it will be used as a full name.
4646{{- define " aws.credentials.path" -}}
4747{{- printf " %s /%s " (include " aws.credentials.secret_mount_path" . ) .Values.aws.credentials.secretKey -}}
4848{{- end -}}
49+
50+ {{/* The rules a of ClusterRole or Role */ }}
51+ {{- define " controller-role-rules" }}
52+ rules:
53+ - apiGroups:
54+ - " "
55+ resources:
56+ - configmaps
57+ verbs:
58+ - get
59+ - list
60+ - patch
61+ - watch
62+ - apiGroups:
63+ - " "
64+ resources:
65+ - namespaces
66+ verbs:
67+ - get
68+ - list
69+ - watch
70+ - apiGroups:
71+ - " "
72+ resources:
73+ - secrets
74+ verbs:
75+ - get
76+ - list
77+ - patch
78+ - watch
79+ - apiGroups:
80+ - dynamodb.services.k8s.aws
81+ resources:
82+ - backups
83+ verbs:
84+ - create
85+ - delete
86+ - get
87+ - list
88+ - patch
89+ - update
90+ - watch
91+ - apiGroups:
92+ - dynamodb.services.k8s.aws
93+ resources:
94+ - backups/status
95+ verbs:
96+ - get
97+ - patch
98+ - update
99+ - apiGroups:
100+ - dynamodb.services.k8s.aws
101+ resources:
102+ - globaltables
103+ verbs:
104+ - create
105+ - delete
106+ - get
107+ - list
108+ - patch
109+ - update
110+ - watch
111+ - apiGroups:
112+ - dynamodb.services.k8s.aws
113+ resources:
114+ - globaltables/status
115+ verbs:
116+ - get
117+ - patch
118+ - update
119+ - apiGroups:
120+ - dynamodb.services.k8s.aws
121+ resources:
122+ - tables
123+ verbs:
124+ - create
125+ - delete
126+ - get
127+ - list
128+ - patch
129+ - update
130+ - watch
131+ - apiGroups:
132+ - dynamodb.services.k8s.aws
133+ resources:
134+ - tables/status
135+ verbs:
136+ - get
137+ - patch
138+ - update
139+ - apiGroups:
140+ - services.k8s.aws
141+ resources:
142+ - adoptedresources
143+ verbs:
144+ - create
145+ - delete
146+ - get
147+ - list
148+ - patch
149+ - update
150+ - watch
151+ - apiGroups:
152+ - services.k8s.aws
153+ resources:
154+ - adoptedresources/status
155+ verbs:
156+ - get
157+ - patch
158+ - update
159+ - apiGroups:
160+ - services.k8s.aws
161+ resources:
162+ - fieldexports
163+ verbs:
164+ - create
165+ - delete
166+ - get
167+ - list
168+ - patch
169+ - update
170+ - watch
171+ - apiGroups:
172+ - services.k8s.aws
173+ resources:
174+ - fieldexports/status
175+ verbs:
176+ - get
177+ - patch
178+ - update
179+ {{- end }}
Original file line number Diff line number Diff line change 1+ apiVersion : rbac.authorization.k8s.io/v1
2+ kind : ClusterRoleBinding
3+ metadata :
4+ name : ack-namespaces-cache-dynamodb-controller
5+ roleRef :
6+ kind : ClusterRole
7+ apiGroup : rbac.authorization.k8s.io
8+ name : ack-namespaces-cache-dynamodb-controller
9+ subjects :
10+ - kind : ServiceAccount
11+ name : ack-dynamodb-controller
12+ namespace : {{ .Release.Namespace }}
13+ ---
14+ apiVersion : rbac.authorization.k8s.io/v1
15+ kind : RoleBinding
16+ metadata :
17+ name : ack-configmaps-cache-dynamodb-controller
18+ namespace : {{ .Release.Namespace }}
19+ roleRef :
20+ kind : Role
21+ apiGroup : rbac.authorization.k8s.io
22+ name : ack-configmaps-cache-dynamodb-controller
23+ subjects :
24+ - kind : ServiceAccount
25+ name : ack-dynamodb-controller
26+ namespace : {{ .Release.Namespace }}
Original file line number Diff line number Diff line change 1+ apiVersion : rbac.authorization.k8s.io/v1
2+ kind : ClusterRole
3+ metadata :
4+ name : ack-namespaces-cache-dynamodb-controller
5+ rules :
6+ - apiGroups :
7+ - " "
8+ resources :
9+ - namespaces
10+ verbs :
11+ - get
12+ - list
13+ - watch
14+ ---
15+ apiVersion : rbac.authorization.k8s.io/v1
16+ kind : Role
17+ metadata :
18+ name : ack-configmaps-cache-dynamodb-controller
19+ namespace : {{ .Release.Namespace }}
20+ rules :
21+ - apiGroups :
22+ - " "
23+ resources :
24+ - configmaps
25+ verbs :
26+ - get
27+ - list
28+ - watch
Original file line number Diff line number Diff line change 1- apiVersion : rbac.authorization.k8s.io/v1
21{{ if eq .Values.installScope "cluster" }}
2+ apiVersion : rbac.authorization.k8s.io/v1
33kind : ClusterRoleBinding
44metadata :
55 name : {{ include "app.fullname" . }}
66roleRef :
77 kind : ClusterRole
8- {{ else }}
8+ apiGroup : rbac.authorization.k8s.io
9+ name : ack-dynamodb-controller
10+ subjects :
11+ - kind : ServiceAccount
12+ name : {{ include "service-account.name" . }}
13+ namespace : {{ .Release.Namespace }}
14+ {{ else if .Values.watchNamespace }}
15+ {{ $namespaces := split "," .Values.watchNamespace }}
16+ {{ $fullname := include "app.fullname" . }}
17+ {{ $releaseNamespace := .Release.Namespace }}
18+ {{ $serviceAccountName := include "service-account.name" . }}
19+ {{ range $namespaces }}
20+ ---
21+ apiVersion : rbac.authorization.k8s.io/v1
922kind : RoleBinding
1023metadata :
11- name : {{ include "app. fullname" . }}
12- namespace : {{ .Release.Namespace }}
24+ name : {{ $ fullname }}
25+ namespace : {{ . }}
1326roleRef :
1427 kind : Role
15- {{ end }}
1628 apiGroup : rbac.authorization.k8s.io
1729 name : ack-dynamodb-controller
1830subjects :
1931- kind : ServiceAccount
20- name : {{ include "service-account.name" . }}
21- namespace : {{ .Release.Namespace }}
32+ name : {{ $serviceAccountName }}
33+ namespace : {{ $releaseNamespace }}
34+ {{ end }}
35+ {{ end }}
You can’t perform that action at this time.
0 commit comments