Add service account and role/rolebinding

2026-04-23 16:23:37 +09:00
parent 502e7f8e2b
commit ed0542e36d
8 changed files with 105 additions and 12 deletions
@@ -12,6 +12,17 @@ Fully qualified name: Release.Name (chart name 중복 시 제거)
 {{- .Release.Name | trunc 63 | trimSuffix "-" }}
 {{- end }}

+{{/*
+ServiceAccount name
+*/}}
+{{- define "flink-cdc-job.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "flink-cdc-job.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
+
 {{/*
 Common labels
 */}}
@@ -9,7 +9,7 @@ spec:
  backoffLimit: 0
  template:
    spec:
-      serviceAccountName: {{ .Values.serviceAccount }}
+      serviceAccountName: {{ include "flink-cdc-job.serviceAccountName" . }}
      containers:
        - name: submit
          image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
@@ -0,0 +1,16 @@
+{{- if .Values.rbac.create }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "flink-cdc-job.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "flink-cdc-job.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get", "list"]
+  - apiGroups: [""]
+    resources: ["pods"]
+    verbs: ["get", "list"]
+{{- end }}
@@ -0,0 +1,17 @@
+{{- if .Values.rbac.create }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "flink-cdc-job.fullname" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "flink-cdc-job.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "flink-cdc-job.fullname" . }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "flink-cdc-job.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
+{{- end }}
@@ -0,0 +1,9 @@
+{{- if .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "flink-cdc-job.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "flink-cdc-job.labels" . | nindent 4 }}
+{{- end }}