From 0283799700013e13259c9b5d509b75eb4715e26b Mon Sep 17 00:00:00 2001
From: Waqar Ahmed <waqarahmedjoyia@live.com>
Date: Fri, 11 Dec 2020 20:31:59 +0500
Subject: [PATCH] Add service account to manage deployments in nextcloud

---
 test/nextcloud/1.0.0/templates/_helpers.tpl   |  7 ++++
 .../1.0.0/templates/serviceaccount.yaml       | 39 +++++++++++++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 test/nextcloud/1.0.0/templates/serviceaccount.yaml

diff --git a/test/nextcloud/1.0.0/templates/_helpers.tpl b/test/nextcloud/1.0.0/templates/_helpers.tpl
index 3c582e14d7b..431c7293536 100644
--- a/test/nextcloud/1.0.0/templates/_helpers.tpl
+++ b/test/nextcloud/1.0.0/templates/_helpers.tpl
@@ -113,3 +113,10 @@ Postgres Selector labels
 app.kubernetes.io/name: {{ include "nextcloud.name" . }}-postgres
 app.kubernetes.io/instance: {{ .Release.Name }}-postgres
 {{- end }}
+
+{{/*
+Nextcloud service account
+*/}}
+{{- define "nextcloud.serviceAccountName" -}}
+{{- printf "%s-service-account" .Release.Name -}}
+{{- end -}}
diff --git a/test/nextcloud/1.0.0/templates/serviceaccount.yaml b/test/nextcloud/1.0.0/templates/serviceaccount.yaml
new file mode 100644
index 00000000000..46a4f18f385
--- /dev/null
+++ b/test/nextcloud/1.0.0/templates/serviceaccount.yaml
@@ -0,0 +1,39 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ template "nextcloud.serviceAccountName" }}
+  namespace: {{ .Release.Namespace }}
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .Release.Name }}-service-account-role-binding
+subjects:
+- kind: ServiceAccount
+  name: {{ template "nextcloud.serviceAccountName" }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: spinupcontainers
+  apiGroup: rbac.authorization.k8s.io
+
+---
+
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .Release.Name }}-service-account-role
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups:
+    - ""
+    - "apps"
+    resources:
+      - pods
+      - deployments
+    verbs:
+      - delete
+      - get
+      - list