Add permissions for cluster-presets

charts/cluster-presets/templates/cluster-role-binding.yaml

@@ -10,5 +10,5 @@ roleRef:
   name: {{ include "cluster-presets.fullname" . }}
 subjects:
 - kind: ServiceAccount
-  name: {{ include "cluster-presets.fullname" . }}
+  name: {{ include "cluster-presets.serviceAccountName" . }}
   namespace: {{ .Release.Namespace }}

charts/cluster-presets/templates/cluster-role.yaml

@@ -11,3 +11,74 @@ rules:
   resources:
   - namespaces
   verbs: ["get"]
+# chart presets
+- apiGroups:
+  - charts.x-helm.dev
+  resources:
+  - chartpresets
+  - clusterchartpresets
+  verbs: ["*"]
+# kubedb
+- apiGroups:
+  - kubedb.com
+  - ops.kubedb.com
+  - autoscaling.kubedb.com
+  resources: ["*"]
+  verbs: ["get", "list", "watch"]
+- apiGroups:
+  - archiver.kubedb.com
+  resources: ["*"]
+  verbs: ["*"]
+# petset
+- apiGroups:
+  - apps.k8s.appscode.com
+  resources:
+  - placementpolicies
+  verbs: ["*"]
+# node topologies
+- apiGroups:
+  - node.k8s.appscode.com
+  resources:
+  - nodetopologies
+  verbs: ["*"]
+# kubestash
+- apiGroups:
+  - storage.kubestash.com
+  resources:
+  - backupstorages
+  - repositories
+  verbs: ["get", "list", "watch"]
+# capi
+- apiGroups:
+  - cluster.x-k8s.io
+  resources:
+  - machinepools
+  verbs: ["*"]
+- apiGroups:
+  - infrastructure.cluster.x-k8s.io
+  resources:
+  - azuremachinepools
+  - gcpmanagedmachinepools
+  verbs: ["*"]
+# karpenter aws
+- apiGroups:
+  - karpenter.sh
+  resources:
+  - nodepools
+  verbs: ["*"]
+- apiGroups:
+  - karpenter.k8s.aws
+  resources:
+  - ec2nodeclasses
+  verbs: ["*"]
+# storage class
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs: ["get", "list", "watch"]
+- apiGroups:
+  - snapshot.storage.k8s.io
+  resources:
+  - volumesnapshotclasses
+  verbs: ["get", "list", "watch"]

charts/cluster-presets/templates/deployment.yaml

@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ include "cluster-presets.fullname" . }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "cluster-presets.labels" . | nindent 4 }}
 spec:

charts/cluster-presets/templates/serviceaccount.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ include "cluster-presets.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "cluster-presets.labels" . | nindent 4 }}
   {{- with .Values.serviceAccount.annotations }}