fix(balius): Add RBAC for ServiceAccount (#189)

Author: verbotenj

charts/balius/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: balius
 description: Balius server
-version: 0.0.3
+version: 0.0.4
 appVersion: "0.0.1"
 
 sources:

charts/balius/templates/rbac.yaml

@@ -0,0 +1,23 @@
+{{- if and .Values.balius.serviceAccount.create (ne .Values.balius.serviceAccount.name "default") }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: {{ .Values.balius.serviceAccount.name }}
+rules:
+  - apiGroups: ["", "demeter.run", "networking.k8s.io", "gateway.networking.k8s.io", "configuration.konghq.com", "coordination.k8s.io"]
+    resources: ["*"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ .Values.balius.serviceAccount.name }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.balius.serviceAccount.name }}
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: ClusterRole
+  name: {{ .Values.balius.serviceAccount.name }}
+  apiGroup: rbac.authorization.k8s.io
+{{- end }}