From 2c4a6ca90b95ee2bcc0c308ae10805c90d5826a5 Mon Sep 17 00:00:00 2001
From: Hidetake Iwata <int128@gmail.com>
Date: Thu, 18 Feb 2021 16:49:24 +0900
Subject: [PATCH] Add cluster role binding for github-webhook-server

---
 .../templates/githubwebhook.role_binding.yaml      | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 charts/actions-runner-controller/templates/githubwebhook.role_binding.yaml

diff --git a/charts/actions-runner-controller/templates/githubwebhook.role_binding.yaml b/charts/actions-runner-controller/templates/githubwebhook.role_binding.yaml
new file mode 100644
index 00000000..24a69456
--- /dev/null
+++ b/charts/actions-runner-controller/templates/githubwebhook.role_binding.yaml
@@ -0,0 +1,14 @@
+{{- if .Values.githubWebhookServer.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include "actions-runner-controller-github-webhook-server.roleName" . }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ include "actions-runner-controller-github-webhook-server.roleName" . }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "actions-runner-controller-github-webhook-server.serviceAccountName" . }}
+    namespace: {{ .Release.Namespace }}
+{{- end }}