Add scope configuration check. (kubernetes#6864)

joomcode · May 17, 2023 · 4cc87a2 · 4cc87a2
1 parent 26ed672
commit 4cc87a2
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/charts/ingress-nginx/templates/clusterrole.yaml b/charts/ingress-nginx/templates/clusterrole.yaml
@@ -1,4 +1,10 @@
-{{- if and .Values.rbac.create (not .Values.rbac.scope) -}}
+{{- if .Values.rbac.create }}
+
+{{- if and .Values.rbac.scope (not .Values.controller.scope.enabled) -}}
+  {{ required "Invalid configuration: 'rbac.scope' should be equal to 'controller.scope.enabled' (true/false)." (index (dict) ".") }}
+{{- end }}
+
+{{- if not .Values.rbac.scope -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
@@ -73,3 +79,5 @@ rules:
       - list
       - watch
 {{- end }}
+
+{{- end }}