Skip to content

Add audit cluster role to ace-user-roles v2026.6.12 #487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tamalsaha merged 2 commits into from
Jun 4, 2026
Merged

Add audit cluster role to ace-user-roles v2026.6.12 #487

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
35498a1
Add audit cluster role to ace-user-roles chart v2026.6.12
tamalsaha Jun 4, 2026
0efda4a
Add Audit field to UserClusterRoles and regenerate
tamalsaha Jun 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions apis/installer/v1alpha1/ace_user_roles_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,7 @@ type AceUserRolesSpec struct {
type UserClusterRoles struct {
Ace bool `json:"ace"`
Appcatalog bool `json:"appcatalog"`
Audit bool `json:"audit"`
Catalog bool `json:"catalog"`
CertManager bool `json:"cert-manager"`
Kubedb bool `json:"kubedb"`
Expand Down
4 changes: 2 additions & 2 deletions charts/ace-user-roles/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@ apiVersion: v2
name: ace-user-roles
description: A Helm chart for ACE user roles
type: application
version: v2026.2.16
appVersion: v2026.2.16
version: v2026.6.12
appVersion: v2026.6.12
icon: https://cdn.appscode.com/images/products/kubeops/icons/android-icon-192x192.png
sources:
- https://github.com/kubeops/installer
Expand Down
11 changes: 6 additions & 5 deletions charts/ace-user-roles/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@
```bash
$ helm repo add appscode https://charts.appscode.com/stable/
$ helm repo update
$ helm search repo appscode/ace-user-roles --version=v2026.2.16
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.2.16
$ helm search repo appscode/ace-user-roles --version=v2026.6.12
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.6.12
```

## Introduction
Expand All @@ -24,7 +24,7 @@ This chart deploys ACE User Roles on a [Kubernetes](http://kubernetes.io) cluste
To install/upgrade the chart with the release name `ace-user-roles`:

```bash
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.2.16
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.6.12
```

The command deploys ACE User Roles on the Kubernetes cluster in the default configuration. The [configuration](#configuration) section lists the parameters that can be configured during installation.
Expand All @@ -51,6 +51,7 @@ The following table lists the configurable parameters of the `ace-user-roles` ch
| fullnameOverride | Overrides fullname template | <code>""</code> |
| enableClusterRoles.ace | | <code>false</code> |
| enableClusterRoles.appcatalog | | <code>false</code> |
| enableClusterRoles.audit | | <code>false</code> |
| enableClusterRoles.catalog | | <code>false</code> |
| enableClusterRoles.cert-manager | | <code>false</code> |
| enableClusterRoles.kubedb-ui | | <code>false</code> |
Expand All @@ -70,12 +71,12 @@ The following table lists the configurable parameters of the `ace-user-roles` ch
Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:

```bash
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.2.16 --set annotations.helm.sh/hook=pre-install,pre-upgrade
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.6.12 --set annotations.helm.sh/hook=pre-install,pre-upgrade
```

Alternatively, a YAML file that specifies the values for the parameters can be provided while
installing the chart. For example:

```bash
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.2.16 --values values.yaml
$ helm upgrade -i ace-user-roles appscode/ace-user-roles -n kubeops --create-namespace --version=v2026.6.12 --values values.yaml
```
19 changes: 19 additions & 0 deletions charts/ace-user-roles/templates/audit/audit-token-requester-cluster-role.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
{{- if dig "audit" false .Values.enableClusterRoles }}

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: appscode:audit-token-requester
{{- with .Values.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
rules:
# Request a NATS credential for publishing audit events
- apiGroups:
- identity.k8s.appscode.com
resources:
- audittokenrequests
verbs: ["create"]

{{- end }}
3 changes: 3 additions & 0 deletions charts/ace-user-roles/values.openapiv3_schema.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ properties:
type: boolean
appcatalog:
type: boolean
audit:
type: boolean
catalog:
type: boolean
cert-manager:
Expand Down Expand Up @@ -36,6 +38,7 @@ properties:
required:
- ace
- appcatalog
- audit
- catalog
- cert-manager
- kubedb
Expand Down
1 change: 1 addition & 0 deletions charts/ace-user-roles/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ fullnameOverride: ""
enableClusterRoles:
ace: false
appcatalog: false
audit: false
catalog: false
cert-manager: false
kubedb-ui: false
Expand Down
6 changes: 3 additions & 3 deletions charts/kube-ui-server/Chart.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
dependencies:
- name: ace-user-roles
repository: file://../ace-user-roles
version: v2026.2.16
digest: sha256:8ebb50d898e45afa11b04daf76165c2fb22f95a7a59568d28fbc592d3f20d748
generated: "2026-02-18T07:11:36.291445+05:30"
version: v2026.6.12
digest: sha256:02eb658e99201f139350aa6d4933467948547f562342cf455bd750659d8ceab4
generated: "2026-06-04T13:37:16.198267+06:00"
2 changes: 1 addition & 1 deletion charts/kube-ui-server/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,4 +18,4 @@ dependencies:
- name: ace-user-roles
repository: file://../ace-user-roles
condition: ace-user-roles.enabled
version: v2026.2.16
version: v2026.6.12
3 changes: 3 additions & 0 deletions charts/kube-ui-server/values.openapiv3_schema.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ properties:
type: boolean
appcatalog:
type: boolean
audit:
type: boolean
catalog:
type: boolean
cert-manager:
Expand Down Expand Up @@ -34,6 +36,7 @@ properties:
required:
- ace
- appcatalog
- audit
- catalog
- cert-manager
- kubedb
Expand Down
6 changes: 3 additions & 3 deletions charts/panopticon/Chart.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
dependencies:
- name: ace-user-roles
repository: file://../ace-user-roles
version: v2026.2.16
digest: sha256:8ebb50d898e45afa11b04daf76165c2fb22f95a7a59568d28fbc592d3f20d748
generated: "2026-02-18T07:11:39.889616+05:30"
version: v2026.6.12
digest: sha256:02eb658e99201f139350aa6d4933467948547f562342cf455bd750659d8ceab4
generated: "2026-06-04T13:37:16.766199+06:00"
2 changes: 1 addition & 1 deletion charts/panopticon/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ dependencies:
- name: ace-user-roles
repository: file://../ace-user-roles
condition: ace-user-roles.enabled
version: v2026.2.16
version: v2026.6.12
1 change: 1 addition & 0 deletions charts/panopticon/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@ The following table lists the configurable parameters of the `panopticon` chart
| ace-user-roles.enabled | If enabled, installs the ace-user-roles chart | <code>true</code> |
| ace-user-roles.enableClusterRoles.ace | | <code>false</code> |
| ace-user-roles.enableClusterRoles.appcatalog | | <code>false</code> |
| ace-user-roles.enableClusterRoles.audit | | <code>true</code> |
| ace-user-roles.enableClusterRoles.catalog | | <code>false</code> |
| ace-user-roles.enableClusterRoles.cert-manager | | <code>false</code> |
| ace-user-roles.enableClusterRoles.kubedb-ui | | <code>false</code> |
Expand Down
3 changes: 3 additions & 0 deletions charts/panopticon/values.openapiv3_schema.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ properties:
type: boolean
appcatalog:
type: boolean
audit:
type: boolean
catalog:
type: boolean
cert-manager:
Expand Down Expand Up @@ -34,6 +36,7 @@ properties:
required:
- ace
- appcatalog
- audit
- catalog
- cert-manager
- kubedb
Expand Down
1 change: 1 addition & 0 deletions charts/panopticon/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,6 +154,7 @@ ace-user-roles:
enableClusterRoles:
ace: false
appcatalog: false
audit: true
catalog: false
cert-manager: false
kubedb-ui: false
Expand Down
Loading