added cluster store syncing

loft-sh · Sep 5, 2024 · 9c7d923 · 9c7d923
1 parent f854283
commit 9c7d923
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/chart/templates/clusterrole.yaml b/chart/templates/clusterrole.yaml
@@ -122,6 +122,11 @@ rules:
     resources: ["customresourcedefinitions"]
     verbs: ["get", "list", "watch"]
   {{- end }}
+  {{- if and .Values.integrations.externalSecrets.enabled .Values.integrations.externalSecrets.sync.clusterStores.enabled }}
+  - apiGroups: ["external-secrets.io"]
+    resources: ["clustersecretstores"]
+    verbs: ["get", "list", "watch"]
+  {{- end }}
   {{- include "vcluster.customResourceDefinitions.clusterRoleExtraRules" . | indent 2 }}
   {{- include "vcluster.plugin.clusterRoleExtraRules" . | indent 2 }}
   {{- include "vcluster.generic.clusterRoleExtraRules" . | indent 2 }}

diff --git a/chart/tests/clusterrole_test.yaml b/chart/tests/clusterrole_test.yaml
@@ -395,3 +395,22 @@ tests:
             apiGroups: [ "apiextensions.k8s.io" ]
             resources: [ "customresourcedefinitions" ]
             verbs: [ "get", "list", "watch" ]
+  - it: eso clusterstore sync
+    set:
+      integrations:
+        externalSecrets:
+          sync:
+            clusterStores:
+              enabled: true
+    release:
+      name: my-release
+      namespace: my-namespace
+    asserts:
+      - hasDocuments:
+          count: 1
+      - contains:
+          path: rules
+          content:
+            apiGroups: [ "external-secrets.io" ]
+            resources: [ "clustersecretstores" ]
+            verbs: [ "get", "list", "watch" ]