{{- if .Values.testFramework.enabled -}}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ .Release.Name }}-test
  namespace: {{ .Release.Namespace }}
  labels:
    type: helm-chart-test
    {{- include "perses.labels" . | nindent 4 }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ .Release.Name }}-test
  namespace: {{ .Release.Namespace }}
  labels:
    type: helm-chart-test
    {{- include "perses.labels" . | nindent 4 }}
rules:
  - apiGroups: ["apps"]
    resources: ["statefulsets","deployments"]
    verbs: ["get", "list"]
  - apiGroups: [""]
    resources: ["pods", "persistentvolumeclaims", "services", "configmaps"]
    verbs: ["get", "list"]
  - apiGroups: ["networking.k8s.io"]
    resources: ["ingresses"]
    verbs: ["get", "list"]
  {{- if .Values.gateway.enabled }}
  - apiGroups: ["gateway.networking.k8s.io"]
    resources: ["gateways", "httproutes"]
    verbs: ["get", "list"]
  {{- end }}
{{- if .Values.serviceMonitor.selfMonitor }}
  - apiGroups: ["monitoring.coreos.com"]
    resources: ["servicemonitors"]
    verbs: ["get", "list"]
{{- end }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: {{ .Release.Name }}-test
  namespace: {{ .Release.Namespace }}
  labels:
    type: helm-chart-test
    {{- include "perses.labels" . | nindent 4 }}
subjects:
  - kind: ServiceAccount
    name: {{ .Release.Name }}-test
    namespace: {{ .Release.Namespace }}
roleRef:
    kind: Role
    name: {{ .Release.Name }}-test
    apiGroup: rbac.authorization.k8s.io
---
{{- end -}}