adding defined rbac roles for argo-events-sa (#43)

controller/trigger.go

@@ -18,6 +18,7 @@ package controller
 
 import (
 	"fmt"
+	"strings"
 
 	"github.com/nats-io/go-nats"
 	"k8s.io/apimachinery/pkg/api/errors"
@@ -84,8 +85,8 @@ func (soc *sOperationCtx) executeTrigger(trigger v1alpha1.Trigger) error {
 
 func sendMessage(message *v1alpha1.Message) error {
 	payload := []byte(message.Body)
-	switch message.Stream.Type {
-	case "NATS":
+	switch strings.ToLower(message.Stream.Type) {
+	case "nats":
 		natsConnection, err := nats.Connect(message.Stream.URL)
 		if err != nil {
 			return err

hack/k8s/manifests/argo-events-cluster-roles.yaml

@@ -0,0 +1,28 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: argo-events-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: argo-events-cluster-role
+subjects:
+- kind: ServiceAccount
+  name: argo-events-sa
+  # Todo: change this value to the respective namespace for argo-events
+  namespace: default
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: argo-events-cluster-role
+rules:
+- apiGroups: ["argoproj.io"]
+  resources: ["sensors"]
+  verbs: ["get", "list", "watch", "update", "patch"]
+- apiGroups: ["argoproj.io"]
+  resources: ["workflows"]
+  verbs: ["create", "delete"]
+- apiGroups: [""]
+  resources: ["configmaps", "secrets"]
+  verbs: ["get", "watch", "list"]

hack/k8s/manifests/argo-events-sa.yaml

@@ -3,5 +3,4 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: argo-events
-  namespace: default
+  name: argo-events-sa

hack/k8s/manifests/sensor-controller-configmap.yaml

@@ -3,17 +3,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: sensor-controller-configmap
-  namespace: default
 data:
   config: |
-    namespace: default
-    serviceAccount: argo-events
     instanceID: axis
-    executorImage: argoproj/sensor-executor:latest
-    executorResources:
-      limits:
-        cpu: 150m
-        memory: 100Mi
-      requests:
-        cpu: 50m
-        memory: 50Mi
+    namespace: default

hack/k8s/manifests/sensor-controller-deployment.yaml

@@ -10,13 +10,15 @@ spec:
       labels:
         app: sensor-controller
     spec:
-      serviceAccountName: argo-events
+      serviceAccountName: argo-events-sa
       containers:
       - name: sensor-controller
         image: argoproj/sensor-controller:latest
         imagePullPolicy: IfNotPresent
         env:
           - name: SENSOR_NAMESPACE
-            value: default
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
           - name: SENSOR_CONFIG_MAP
             value: sensor-controller-configmap