Update charts

block · Nov 29, 2024 · 85d80ab · 85d80ab
1 parent 4b56bfc
commit 85d80ab
Show file tree

Hide file tree

Showing 6 changed files with 45 additions and 44 deletions.
diff --git a/charts/ftl/Chart.yaml b/charts/ftl/Chart.yaml
@@ -3,8 +3,8 @@ name: ftl
 description: |
   A Helm chart for Kubernetes that deploys FTL
 home: https://github.com/TBD54566975/ftl
-version: 0.407.1
-appVersion: 0.407.1
+version: 0.408.0
+appVersion: 0.408.0
 dependencies:
   - name: postgresql
     version: 15.5.38

diff --git a/charts/ftl/templates/controller-role.yaml b/charts/ftl/templates/controller-role.yaml
@@ -7,42 +7,3 @@ metadata:
   annotations:
     eks.amazonaws.com/role-arn: {{ .Values.controller.controllersRoleArn }}
   {{- end }}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: {{ include "ftl.fullname" . }}-controller
-  labels:
-    {{- include "ftl.labels" . | nindent 4 }}
-rules:
-  - apiGroups: [ "apps" ]
-    resources: [ "deployments" ]
-    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
-  - apiGroups: [ "" ]
-    resources: [ "services" , "serviceaccounts"]
-    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
-  - apiGroups: [ "" ]
-    resources: [ "pods" ]
-    verbs: [ "get", "list", "watch" ]
-  - apiGroups: [ "" ]
-    resources: [ "configmaps" ]
-    resourceNames:
-      - ftl-controller-deployment-config
-    verbs: [ "get"]
-  - apiGroups: [ "security.istio.io" ]
-    resources: [ "authorizationpolicies" ]
-    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: {{ include "ftl.fullname" . }}-controller
-  labels:
-    {{- include "ftl.labels" . | nindent 4 }}
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: {{ include "ftl.fullname" . }}-controller
-subjects:
-  - kind: ServiceAccount
-    name: {{ .Values.controller.serviceAccountName }}
diff --git a/charts/ftl/templates/provisioner-config-map.yaml b/charts/ftl/templates/provisioner-config-map.yaml
@@ -9,5 +9,6 @@ data:
     plugins = [
         { id = "cloudformation", resources = ["postgres"] },
         { id = "controller", resources = ["module"] },
+        { id = "kubernetes", resources = ["runner"] },
     ]
 {{- end}}
diff --git a/charts/ftl/templates/provisioner-role.yaml b/charts/ftl/templates/provisioner-role.yaml
@@ -7,3 +7,42 @@ metadata:
   annotations:
     eks.amazonaws.com/role-arn: {{ .Values.provisioner.provisionersRoleArn }}
   {{- end }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "ftl.fullname" . }}-provisioner
+  labels:
+    {{- include "ftl.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [ "apps" ]
+    resources: [ "deployments" ]
+    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
+  - apiGroups: [ "" ]
+    resources: [ "services" , "serviceaccounts"]
+    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
+  - apiGroups: [ "" ]
+    resources: [ "pods" ]
+    verbs: [ "get", "list", "watch" ]
+  - apiGroups: [ "" ]
+    resources: [ "configmaps" ]
+    resourceNames:
+      - ftl-controller-deployment-config
+    verbs: [ "get"]
+  - apiGroups: [ "security.istio.io" ]
+    resources: [ "authorizationpolicies" ]
+    verbs: [ "get", "list", "watch", "delete", "create", "update", "patch" ]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "ftl.fullname" . }}-provisioner
+  labels:
+    {{- include "ftl.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "ftl.fullname" . }}-provisioner
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.provisioner.serviceAccountName }}
diff --git a/charts/ftl/templates/provisioner.yaml b/charts/ftl/templates/provisioner.yaml
@@ -51,7 +51,7 @@ spec:
             {{- else }}
             httpGet:
               path: /healthz
-              port: 8893
+              port: 8892
             initialDelaySeconds: 1
             periodSeconds: 2
             timeoutSeconds: 2

diff --git a/charts/ftl/templates/runner.yaml b/charts/ftl/templates/runner.yaml
@@ -14,9 +14,9 @@ data:
       ports:
         - name: verbs
           protocol: TCP
-          port: 8893
+          port: 8892
           appProtocol: http
-          targetPort: 8893
+          targetPort: 8892
       type: ClusterIP
   deploymentTemplate: |-
     apiVersion: apps/v1