mirror of
https://github.com/truenas/charts.git
synced 2026-04-14 02:30:53 +08:00
929e60d801
* Adapt charts CI and improve/fix common * add check on permissions contaienr * add postgres template * update comments * Update create_app.sh * add check * update script * auto gen item.yaml from Chart,yaml * rename readme on dest * duplicate readme from the same source * correct comment * reoder * remove extra space * keep both README and app-readme * update regex, to also allow 2 letter names, which is also valid * No need to check host network if there aren't any pod values * use same pattern as the pod.name label (not prepending release-name * update deps * add chart dirs to ci * Add a validation to check if there is any yaml errors after merging files * update charts path on ci * common/1.0.0/ -> common/ * update common-test dep path * temp update create_app script * make permissions container name configurable, incase we want to change order of execution * update naming convention * fix typo and a missed name change * do not allow `--` in names
39 lines
977 B
Smarty
39 lines
977 B
Smarty
{{/* RBAC Primary Validation */}}
|
|
{{/* Call this template:
|
|
{{ include "ix.v1.common.lib.rbac.primaryValidation" $ -}}
|
|
*/}}
|
|
|
|
{{- define "ix.v1.common.lib.rbac.primaryValidation" -}}
|
|
|
|
{{/* Initialize values */}}
|
|
{{- $hasPrimary := false -}}
|
|
{{- $hasEnabled := false -}}
|
|
|
|
{{- range $name, $rbac := .Values.rbac -}}
|
|
|
|
{{/* If rbac is enabled */}}
|
|
{{- if $rbac.enabled -}}
|
|
{{- $hasEnabled = true -}}
|
|
|
|
{{/* And rbac is primary */}}
|
|
{{- if and (hasKey $rbac "primary") ($rbac.primary) -}}
|
|
|
|
{{/* Fail if there is already a primary rbac */}}
|
|
{{- if $hasPrimary -}}
|
|
{{- fail "RBAC - Only one rbac can be primary" -}}
|
|
{{- end -}}
|
|
|
|
{{- $hasPrimary = true -}}
|
|
|
|
{{- end -}}
|
|
|
|
{{- end -}}
|
|
{{- end -}}
|
|
|
|
{{/* Require at least one primary rbac, if any enabled */}}
|
|
{{- if and $hasEnabled (not $hasPrimary) -}}
|
|
{{- fail "RBAC - At least one enabled rbac must be primary" -}}
|
|
{{- end -}}
|
|
|
|
{{- end -}}
|