Result of make helm-charts

Author: daniel-de-vera

signadot/operator/templates/allowed_namespaces.yaml

@@ -1,6 +1,7 @@
 # Bind the ClusterRole containing namespaced permissions to the
 # controller-manager's ServiceAccount only in the specified namespaces.
-{{ range $namespace := .Values.allowedNamespaces }}
+{{- $allowedNamespaces := (include "getAllowedNamespaces" . | fromJsonArray) -}}
+{{ range $namespace := $allowedNamespaces }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

signadot/operator/templates/signadot-controller-manager-deployment.yaml

@@ -42,8 +42,6 @@ spec:
         command:
         - /manager
         env:
-        - name: ALLOWED_NAMESPACES
-          value: {{ range $i, $val := .Values.allowedNamespaces }}{{ if gt $i 0 }},{{ end }}{{ $val }}{{ else }}""{{ end }}
         - name: SIDECAR_INIT_IMAGE_PULL_POLICY
           value: {{ with .Values }}{{ with .routeInit }}{{ with .imagePullPolicy }}{{ . }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}{{- else -}}"IfNotPresent"{{- end }}
         - name: SIDECAR_INIT_IMAGE_PULL_SECRET

signadot/operator/templates/signadot-manager-namespaced-clusterrole.yaml

@@ -26,6 +26,7 @@ rules:
   - ""
   resources:
   - pods
+  - endpoints
   verbs:
   - create
   - delete

signadot/operator/templates/signadot-manager-role-clusterrole.yaml

@@ -12,18 +12,6 @@ metadata:
     {{- end }}
   name: signadot-manager-role
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
 - apiGroups:
   - admissionregistration.k8s.io
   resourceNames: