bugfix: rbac role

Signed-off-by: Smuu <[email protected]>

charts/celestia-node/templates/role.yaml

@@ -10,14 +10,9 @@ metadata:
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 rules:
-  # TODO: Update resources and verbs to the proper values for the application cases
-  - apiGroups: [""]
-    resources: ["*"]
-    verbs: ["*"]
-  - apiGroups: [""]
-    resources: ["*"]
-    verbs: ["*"]
   {{- if .Values.rbac.rules }}
   {{- include "common.tplvalues.render" ( dict "value" .Values.rbac.rules "context" $ ) | nindent 2 }}
+  {{- else }}
+  []
   {{- end }}
 {{- end }}

charts/celestia-node/templates/clusterrolebinding.yaml → charts/celestia-node/templates/rolebinding.yaml

@@ -1,17 +1,20 @@
-kind: ClusterRoleBinding
+{{ if .Values.rbac.create }}
+kind: RoleBinding
 apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
 metadata:
-  name: {{ template "common.names.fullname" . }}
+  name: {{ include "common.names.fullname" . }}
+  namespace: {{ include "common.names.namespace" . | quote }}
   labels: {{- include "common.labels.standard" ( dict "customLabels" .Values.commonLabels "context" $ ) | nindent 4 }}
     app.kubernetes.io/component: node
   {{- if .Values.commonAnnotations }}
   annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: {{ template "common.names.fullname" . }}
+  kind: Role
+  name: {{ include "common.names.fullname" . }}
 subjects:
   - kind: ServiceAccount
     name: {{ template "node.serviceAccountName" . }}
     namespace: {{ include "common.names.namespace" . | quote }}
+{{- end }}