Allow adding extra rules to the clusterrole about charts

[rimusz]

it can be done e.g. in values.yaml (hint for the PR):

rbac:
  create: true
  role:
    ## Rules to create. It follows the role specification
    rules:
    - apiGroups:
        - ""
        resources:
        - namespaces
        verbs:
        - watch
        - list
    - apiGroups:
        - ""
        resources:
        - secrets
        verbs:
        - get
        - watch
        - list
    - apiGroups:
        - ""
        - extensions
        - apps
        - batch
        resources:
        - pods
        - replicasets
        - replicationcontrollers
        - statefulsets
        - deployments
        - daemonsets
        - jobs
        - cronjobs
        verbs:
        - get
        - delete # required to delete pods during force upgrade of the same tag
        - watch
        - list
        - update
    - apiGroups:
        - ""
        resources:
        - configmaps
        - secrets
        verbs:
        - get
        - create
        - update

then in the clusterrole.yaml:

rules:
{{ toYaml .Values.rbac.role.rules }}

[jradtilbrook]

Cool! Does that mean you'd accept a PR to add that?

[rimusz]

of course :)

[loeffel-io]

how the holy can i add the value create to rbac.role.rules[2].verbs for example?