- Tempalized the clusterrole to get the correct labels

5GSEC · Jul 2, 2024 · b97aac0 · b97aac0
1 parent 8efde05
commit b97aac0
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/deployments/nimbus-kyverno/templates/_helpers.tpl b/deployments/nimbus-kyverno/templates/_helpers.tpl
@@ -50,6 +50,15 @@ app.kubernetes.io/name: {{ include "nimbus-kyverno.name" . }}
 app.kubernetes.io/instance: {{ .Release.Name }}
 {{- end }}
 
+{{/*
+ClusterRoleSelector labels
+*/}}
+{{- define "nimbus-kyverno.clusterRoleSelectorLabels" -}}
+app.kubernetes.io/name: background-controller
+app.kubernetes.io/instance: {{ .Release.Name }}
+app.kubernetes.io/part-of: {{ .Release.Name }}-kyverno
+{{- end }}
+
 {{/*
 Create the name of the service account to use
 */}}

diff --git a/deployments/nimbus-kyverno/templates/clusterrole.yaml b/deployments/nimbus-kyverno/templates/clusterrole.yaml
@@ -2,9 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   labels:
-    app.kubernetes.io/component: background-controller
-    app.kubernetes.io/instance: nimbus-kyverno
-    app.kubernetes.io/part-of: nimbus-kyverno
+    {{- include "nimbus-kyverno.clusterRoleSelectorLabels" . | nindent 4 }}
   name: nimbus-kyverno:update-resources
 rules:
 - apiGroups: