From 51d70a184cdffe10f5f0838ce906055c3324ef5f Mon Sep 17 00:00:00 2001
From: James Munnelly <james@munnelly.eu>
Date: Sun, 7 Jan 2018 17:23:07 +0000
Subject: [PATCH] Make use of RBAC configurable

---
 charts/kube-plex/templates/deployment.yaml | 2 +-
 charts/kube-plex/templates/rbac.yaml       | 2 ++
 charts/kube-plex/values.yaml               | 6 ++++++
 3 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/charts/kube-plex/templates/deployment.yaml b/charts/kube-plex/templates/deployment.yaml
index a4b34d4..36cf26d 100644
--- a/charts/kube-plex/templates/deployment.yaml
+++ b/charts/kube-plex/templates/deployment.yaml
@@ -21,7 +21,7 @@ spec:
         app: {{ template "name" . }}
         release: {{ .Release.Name }}
     spec:
-      serviceAccountName: "{{ template "fullname" . }}"
+      serviceAccountName: {{ if .Values.rbac.create }}{{ template "fullname" . }}{{ else }}{{ .Values.rbac.serviceAccountName | quote }}{{ end }}
       hostname: "{{ template "fullname" . }}"
       initContainers:
       - name: kube-plex-install
diff --git a/charts/kube-plex/templates/rbac.yaml b/charts/kube-plex/templates/rbac.yaml
index 3f32813..ef7bc49 100644
--- a/charts/kube-plex/templates/rbac.yaml
+++ b/charts/kube-plex/templates/rbac.yaml
@@ -1,3 +1,4 @@
+{{- if .Values.rbac.create -}}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -48,3 +49,4 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ template "fullname" . }}
+{{- end }}
diff --git a/charts/kube-plex/values.yaml b/charts/kube-plex/values.yaml
index 7219fc0..fb07438 100644
--- a/charts/kube-plex/values.yaml
+++ b/charts/kube-plex/values.yaml
@@ -31,6 +31,12 @@ ingress:
     #   hosts:
     #     - chart-example.local
 
+rbac:
+  create: true
+  # Specify create: false and serviceAccountName to manually manage the service
+  # account for this deployment
+  ## serviceAccountName: ""
+
 persistence:
   transcode:
     # Optionally specify claimName to manually override the PVC to be used for