mirror of
https://github.com/truenas/charts.git
synced 2026-04-10 22:28:53 +08:00
929e60d801
* Adapt charts CI and improve/fix common * add check on permissions contaienr * add postgres template * update comments * Update create_app.sh * add check * update script * auto gen item.yaml from Chart,yaml * rename readme on dest * duplicate readme from the same source * correct comment * reoder * remove extra space * keep both README and app-readme * update regex, to also allow 2 letter names, which is also valid * No need to check host network if there aren't any pod values * use same pattern as the pod.name label (not prepending release-name * update deps * add chart dirs to ci * Add a validation to check if there is any yaml errors after merging files * update charts path on ci * common/1.0.0/ -> common/ * update common-test dep path * temp update create_app script * make permissions container name configurable, incase we want to change order of execution * update naming convention * fix typo and a missed name change * do not allow `--` in names
39 lines
1.1 KiB
Smarty
39 lines
1.1 KiB
Smarty
{{/* Service Account Primary Validation */}}
|
|
{{/* Call this template:
|
|
{{ include "ix.v1.common.lib.serviceAccount.primaryValidation" $ -}}
|
|
*/}}
|
|
|
|
{{- define "ix.v1.common.lib.serviceAccount.primaryValidation" -}}
|
|
|
|
{{/* Initialize values */}}
|
|
{{- $hasPrimary := false -}}
|
|
{{- $hasEnabled := false -}}
|
|
|
|
{{- range $name, $serviceAccount := .Values.serviceAccount -}}
|
|
|
|
{{/* If service account is enabled */}}
|
|
{{- if $serviceAccount.enabled -}}
|
|
{{- $hasEnabled = true -}}
|
|
|
|
{{/* And service account is primary */}}
|
|
{{- if and (hasKey $serviceAccount "primary") ($serviceAccount.primary) -}}
|
|
|
|
{{/* Fail if there is already a primary service account */}}
|
|
{{- if $hasPrimary -}}
|
|
{{- fail "Service Account - Only one service account can be primary" -}}
|
|
{{- end -}}
|
|
|
|
{{- $hasPrimary = true -}}
|
|
|
|
{{- end -}}
|
|
|
|
{{- end -}}
|
|
{{- end -}}
|
|
|
|
{{/* Require at least one primary service account, if any enabled */}}
|
|
{{- if and $hasEnabled (not $hasPrimary) -}}
|
|
{{- fail "Service Account - At least one enabled service account must be primary" -}}
|
|
{{- end -}}
|
|
|
|
{{- end -}}
|