feat(charts/capsule-proxy): added extra manifests in values file

Signed-off-by: Llyth <[email protected]>

Author: Llyth

charts/capsule-proxy/README.md

@@ -136,6 +136,7 @@ If you only need to make minor customizations, you can specify them on the comma
 | daemonset.hostNetwork | bool | `false` | Use the host network namespace for capsule-proxy pod. |
 | daemonset.hostPort | bool | `false` | Binding the capsule-proxy listening port to the host port. |
 | env | list | `[]` | Additional environment variables |
+| extraManifests | list | `[]` | Array of additional resources to be created alongside Capsule helm chart |
 | hostNetwork | bool | `false` | When deployed as DaemonSet use |
 | image.pullPolicy | string | `"IfNotPresent"` | Set the image pull policy. |
 | image.registry | string | `"ghcr.io"` | Set the image registry for capsule-proxy |

charts/capsule-proxy/ci/extra-values.yaml

@@ -0,0 +1,21 @@
+# -- Array of additional resources to be created alongside Capsule helm chart
+extraManifests:
+  - apiVersion: capsule.clastix.io/v1beta1
+    kind: GlobalProxySettings
+    metadata:
+      name: global-proxy-settings
+    spec:
+      rules:
+      - subjects:
+        - kind: User
+          name: alice
+        clusterResources:
+        - apiGroups:
+          - "*"
+          resources:
+          - "*"
+          operations:
+          - List
+          selector:
+            matchLabels:
+              app.kubernetes.io/type: dev

charts/capsule-proxy/templates/extra-manifests.yaml

@@ -0,0 +1,4 @@
+{{ range .Values.extraManifests }}
+---
+{{ tpl (toYaml .) $ }}
+{{ end }}

charts/capsule-proxy/values.yaml

@@ -329,6 +329,35 @@ certManager:
         rotationPolicy: 'Always'
       # renewBefore: '24h'
 
+# -- Array of additional resources to be created alongside Capsule helm chart
+extraManifests: []
+  # - apiVersion: v1
+  #   kind: ConfigMap
+  #   metadata:
+  #     name: extra-configmap
+  #   data:
+  #     key: value
+  #
+  # - apiVersion: capsule.clastix.io/v1beta1
+  #   kind: GlobalProxySettings
+  #   metadata:
+  #     name: global-proxy-settings
+  #   spec:
+  #     rules:
+  #     - subjects:
+  #       - kind: User
+  #         name: alice
+  #       clusterResources:
+  #       - apiGroups:
+  #         - "*"
+  #         resources:
+  #         - "*"
+  #         operations:
+  #         - List
+  #         selector:
+  #           matchLabels:
+  #             app.kubernetes.io/type: dev
+
 webhooks:
   # -- Enable the usage of mutating and validating webhooks
   enabled: false