Add service account for site controller

Add pod name to site controller

Add option

disable by default

Author: bennetthardwick

charts/primary-site/templates/deployments/site-controller.yaml

@@ -23,6 +23,7 @@ spec:
         {{ $key }}: {{ $value | quote }}
         {{- end }}
     spec:
+      serviceAccount: site-controller
       {{- if .Values.siteController.deployment.extraVolumes }}
       volumes:
         {{- toYaml .Values.siteController.deployment.extraVolumes | nindent 8 }}
@@ -82,6 +83,14 @@ spec:
               value: {{ .Values.siteController.deployment.metrics.subsystem }}
             - name: PRIMARY_SITE_VERSION
               value: {{ .Chart.Version }}
+            - name: ENABLE_SITE_METRICS
+              value: "{{ .Values.globals.publishSiteMetrics }}"
+            - name: SITE_CONTROLLER_NAMESPACE
+              value: {{ .Release.Namespace }}
+            - name: SITE_CONTROLLER_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
             {{- range $item := .Values.siteController.deployment.env }}
             - name: {{ $item.name }}
               value: {{ $item.value | quote}}

charts/primary-site/templates/serviceaccounts/site-controller.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: site-controller
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: site-controller
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: view
+subjects:
+  - kind: ServiceAccount
+    name: site-controller
+    namespace: {{ .Release.Namespace }}

charts/primary-site/values.yaml

@@ -29,6 +29,9 @@ globals:
     storageProvider: google_cloud
     bucketName: foxglove-index-in-place
 
+  ## Publish metrics from the primary site to Foxglove
+  publishSiteMetrics: false
+
   ## Configure an http/https egress proxy if your environment requires outgoing connections to be proxied. Set `enabled` to `true` and appropriate values for `httpProxy`, `httpsProxy` and `noProxy`.
   proxy:
     enabled: false