adding ability to check configmaps for SBJ (#208)

Need to check configmaps plus `console.operator.openshift.io cluster`
securesign · Mar 19, 2024 · e8a7ba2 · e8a7ba2
2 parents 3c82f38 + 5369491
commit e8a7ba2
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 3 deletions.
diff --git a/charts/trusted-artifact-signer/Chart.yaml b/charts/trusted-artifact-signer/Chart.yaml
@@ -33,4 +33,4 @@ sources:
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.48
+version: 0.1.49
diff --git a/charts/trusted-artifact-signer/README.md b/charts/trusted-artifact-signer/README.md
@@ -157,7 +157,7 @@ Kubernetes: `>= 1.19.0-0`
 | configs.segment_backup_job.image.pullPolicy |  | string | `"IfNotPresent"` |
 | configs.segment_backup_job.image.registry |  | string | `"quay.io"` |
 | configs.segment_backup_job.image.repository |  | string | `"redhat-user-workloads/rhtas-tenant/segment-backup-job/segment-backup-job"` |
-| configs.segment_backup_job.image.version |  | string | `"sha256:3d229e3cd63ca2673b9db3c595677c8b6898ff48e474d7b5c555fb19e9f858a3"` |
+| configs.segment_backup_job.image.version |  | string | `"sha256:8adc001b08216d001271d254f918fc1855c575123e393783102ddc991bf9f082"` |
 | configs.segment_backup_job.name |  | string | `"segment-backup-job"` |
 | configs.segment_backup_job.namespace |  | string | `"trusted-artifact-signer-monitoring"` |
 | configs.segment_backup_job.namespace_create |  | bool | `false` |

diff --git a/charts/trusted-artifact-signer/templates/segment-backup-job-clusterrole.yaml b/charts/trusted-artifact-signer/templates/segment-backup-job-clusterrole.yaml
@@ -8,6 +8,7 @@ rules:
   - ""
   resources:
   - secrets
+  - configmaps
   verbs:
   - get
   - list
@@ -18,4 +19,10 @@ rules:
   verbs:
   - get
   - list 
+- apiGroups:
+  - "operator.openshift.io/v1"
+  resources:
+  - console
+  verbs:
+  - get
 {{- end}}
diff --git a/charts/trusted-artifact-signer/values.yaml b/charts/trusted-artifact-signer/values.yaml
@@ -11,7 +11,7 @@ configs:
     image:
       registry: quay.io
       repository: redhat-user-workloads/rhtas-tenant/segment-backup-job/segment-backup-job
-      version: "sha256:89cadb0759653c1e2d9e0b1ecc540eace323f23cff4d1e964ec49333e51eced7"
+      version: "sha256:8adc001b08216d001271d254f918fc1855c575123e393783102ddc991bf9f082"
       pullPolicy: IfNotPresent
     rolebindings:
       - segment-backup-job