added boilerplate for the change in values

prometheus-community · May 18, 2024 · 846dea6 · 846dea6
1 parent 67e796b
commit 846dea6
Show file tree

Hide file tree

Showing 5 changed files with 21 additions and 5 deletions.
diff --git a/charts/kube-state-metrics/templates/_helpers.tpl b/charts/kube-state-metrics/templates/_helpers.tpl
@@ -35,6 +35,18 @@ Create the name of the service account to use
 {{- end -}}
 {{- end -}}
 
+{{/*
+Create a fully qualified ClusterRole name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+*/}}
+{{- define "kube-state-metrics.clusterRoleName" -}}
+{{- if .Values.rbac.clusterRoleNameOverride -}}
+{{ .Values.rbac.clusterRoleNameOverride | trunc 63 | trimSuffix "-" }}
+{{- else -}}
+{{ include "kube-state-metrics.fullname" . }}
+{{- end -}}
+{{- end -}}
+
 {{/*
 Allow the release namespace to be overridden for multi-namespace deployments in combined charts
 */}}

diff --git a/charts/kube-state-metrics/templates/clusterrolebinding.yaml b/charts/kube-state-metrics/templates/clusterrolebinding.yaml
@@ -4,14 +4,14 @@ kind: ClusterRoleBinding
 metadata:
   labels:
     {{- include "kube-state-metrics.labels" . | indent 4 }}
-  name: {{ template "kube-state-metrics.fullname" . }}
+  name: {{ include "kube-state-metrics.clusterRoleName" . }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
 {{- if .Values.rbac.useExistingRole }}
   name: {{ .Values.rbac.useExistingRole }}
 {{- else }}
-  name: {{ template "kube-state-metrics.fullname" . }}
+  name: {{ include "kube-state-metrics.clusterRoleName" . }}
 {{- end }}
 subjects:
 - kind: ServiceAccount

diff --git a/charts/kube-state-metrics/templates/psp-clusterrole.yaml b/charts/kube-state-metrics/templates/psp-clusterrole.yaml
@@ -4,7 +4,7 @@ kind: ClusterRole
 metadata:
   labels:
     {{- include "kube-state-metrics.labels" . | indent 4 }}
-  name: psp-{{ template "kube-state-metrics.fullname" . }}
+  name: psp-{{ include "kube-state-metrics.clusterRoleName" . }}
 rules:
 {{- $kubeTargetVersion := default .Capabilities.KubeVersion.GitVersion .Values.kubeTargetVersionOverride }}
 {{- if semverCompare "> 1.15.0-0" $kubeTargetVersion }}

diff --git a/charts/kube-state-metrics/templates/psp-clusterrolebinding.yaml b/charts/kube-state-metrics/templates/psp-clusterrolebinding.yaml
@@ -4,11 +4,11 @@ kind: ClusterRoleBinding
 metadata:
   labels:
     {{- include "kube-state-metrics.labels" . | indent 4 }}
-  name: psp-{{ template "kube-state-metrics.fullname" . }}
+  name: psp-{{ include "kube-state-metrics.clusterRoleName" . }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: psp-{{ template "kube-state-metrics.fullname" . }}
+  name: psp-{{ include "kube-state-metrics.clusterRoleName" . }}
 subjects:
   - kind: ServiceAccount
     name: {{ template "kube-state-metrics.serviceAccountName" . }}

diff --git a/charts/kube-state-metrics/values.yaml b/charts/kube-state-metrics/values.yaml
@@ -89,6 +89,10 @@ rbac:
   # If set to false - Run without Cluteradmin privs needed - ONLY works if namespace is also set (if useExistingRole is set this name is used as ClusterRole or Role to bind to)
   useClusterRole: true
 
+  ## If set it will override prometheus.server.fullname value for ClusterRole and ClusterRoleBinding
+  ##
+  clusterRoleNameOverride: ""
+
   # Add permissions for CustomResources' apiGroups in Role/ClusterRole. Should be used in conjunction with Custom Resource State Metrics configuration
   # Example:
   # - apiGroups: ["monitoring.coreos.com"]