allow user to specify custom perms as a property

lbi22 · lbi22 · commit 5523485cc162 · 2023-11-09T14:35:17.000+01:00
diff --git a/helm/coder/values.yaml b/helm/coder/values.yaml
@@ -94,9 +94,21 @@ coder:
     # coder.serviceAccount.enableDeployments -- Provides the service account permission
     # to manage Kubernetes deployments.
     enableDeployments: true
-    # coder.serviceAccount.enableServices -- Provides the service account permission
-    # to manage Kubernetes services.
-    enableServices: false
+    # coder.serviceAccount.extraResources -- A list of service account permission
+    # to be menaged inside the workspace.
+    extraResources: []
+    # - apiGroups: [""]
+    #   resources: ["services"]
+    #   verbs:
+    #   - create
+    #   - delete
+    #   - deletecollection
+    #   - get
+    #   - list
+    #   - patch
+    #   - update
+    #   - watch
+
     # coder.serviceAccount.annotations -- The Coder service account annotations.
     annotations: {}
     # coder.serviceAccount.name -- The service account name
diff --git a/helm/libcoder/templates/_rbac.yaml b/helm/libcoder/templates/_rbac.yaml
@@ -43,18 +43,8 @@ rules:
     - update
     - watch
 {{- end }}
-{{- if .Values.coder.serviceAccount.enableServices }}
-  - apiGroups: [""]
-    resources: ["services"]
-    verbs:
-    - create
-    - delete
-    - deletecollection
-    - get
-    - list
-    - patch
-    - update
-    - watch
+{{- with .Values.coder.serviceAccount.extraResources }}
+{{ toYaml . | nindent 2 }}
 {{- end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
