feat: Argo workflows RBAC chart (#165)

chanzuckerberg · Nov 7, 2024 · 8ba95db · 8ba95db
1 parent 41b0d93
commit 8ba95db
Show file tree

Hide file tree

Showing 5 changed files with 86 additions and 0 deletions.
diff --git a/argo-workflows-rbac/Chart.yaml b/argo-workflows-rbac/Chart.yaml
@@ -0,0 +1,9 @@
+apiVersion: v2
+name: argo-workflows-rbac
+description: A Helm chart for creating an Argo Workflows rbac resources to allow access to workflow templates.
+
+type: application
+
+version: 0.0.1
+
+appVersion: "0.0.1"
diff --git a/argo-workflows-rbac/README.md b/argo-workflows-rbac/README.md
@@ -0,0 +1,6 @@
+# Argo Workflows RBAC helm chart
+
+A Helm chart for creating an Argo Workflows rbac resources to allow access to workflow templates.
+
+## Parameters
+
diff --git a/argo-workflows-rbac/templates/rbac.yaml b/argo-workflows-rbac/templates/rbac.yaml
@@ -0,0 +1,6 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Values.clusterRole.name }}
+rules:
+{{ toYaml .Values.clusterRole.rules | indent 2 }}
diff --git a/argo-workflows-rbac/values.schema.json b/argo-workflows-rbac/values.schema.json
@@ -0,0 +1,46 @@
+{
+    "title": "Chart Values",
+    "type": "object",
+    "properties": {
+        "clusterRole": {
+            "type": "object",
+            "properties": {
+                "name": {
+                    "type": "string",
+                    "description": "Cluster Role name to create",
+                    "default": "czi-argo-workflows-server-cluster-template"
+                },
+                "rules": {
+                    "type": "array",
+                    "description": "ApiGroups API groups to apply the rules to",
+                    "items": {
+                        "type": "object",
+                        "properties": {
+                            "apiGroups": {
+                                "type": "array",
+                                "description": "ApiGroups API groups to apply the rules to",
+                                "items": {
+                                    "type": "string"
+                                }
+                            },
+                            "resources": {
+                                "type": "array",
+                                "description": "Resources to apply the rules to",
+                                "items": {
+                                    "type": "string"
+                                }
+                            },
+                            "verbs": {
+                                "type": "array",
+                                "description": "Verbs to apply the rules to",
+                                "items": {
+                                    "type": "string"
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
diff --git a/argo-workflows-rbac/values.yaml b/argo-workflows-rbac/values.yaml
@@ -0,0 +1,19 @@
+clusterRole:
+## @param clusterRole.name Cluster Role name to create
+  name: czi-argo-workflows-server-cluster-template
+  rules:
+## @param clusterRole.rules[0].apiGroups ApiGroups API groups to apply the rules to
+  - apiGroups:
+    - argoproj.io
+## @param clusterRole.rules[0].resources Resources to apply the rules to
+    resources:
+    - clusterworkflowtemplates
+## @param clusterRole.rules[0].verbs Verbs to apply the rules to
+    verbs:
+    - get
+    - list
+    - watch
+    - create
+    - update
+    - patch
+    - delete