Merge pull request #11 from armosec/dev

add service account to support on demand Kubescape [cron]job

charts/armo-components/Chart.yaml

@@ -17,13 +17,13 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.5.0
+version: 1.6.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v1.5.0"
+appVersion: "v1.6.0"
 
 maintainers:
     - name: Ben Hirschberg

charts/armo-components/templates/armo-kubescape-namespace-role-binding.yaml

@@ -0,0 +1,13 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.global.armoServiceAccountName }}-role-binding
+  namespace: {{ .Values.armoNameSpace }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ .Values.global.armoServiceAccountName }}-roles
+subjects:
+- kind: ServiceAccount
+  name: {{ .Values.global.armoServiceAccountName }}
+  namespace: {{ .Values.armoNameSpace }}

charts/armo-components/templates/armo-kubescape-namespace-role.yaml

@@ -0,0 +1,12 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: {{ .Values.global.armoServiceAccountName }}-roles
+  namespace: {{ .Values.armoNameSpace }}
+rules:
+- apiGroups: ["*"]
+  resources: ["*"]
+  verbs: ["get", "list", "describe"]
+- apiGroups: ["batch"]
+  resources: ["jobs", "cronjobs"]
+  verbs: ["*"]