@nathapp/na-cli 1.0.0-rc.17 → 1.0.0-rc.19

package/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/individual-profile.ts

@@ -0,0 +1,277 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import HubService, { User, challengeIt, goodRet, badRet, serviceUrl, mxwV1ServiceUrl, uploadOSS } from "./hub";
+import { throwError, errors, describeError } from 'mxw-libs-errors';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+export function profile(user: User, challenge: boolean) {
+    describe('Suite: Individual Profile: ' + user.code + " (" + user.email + ")", function () {
+        if (challenge) {
+            it("Get profile - challenge without JWT", function () {
+                let url = serviceUrl("/user/api");
+
+                return chai.request(url).get("/profile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Get profile", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).get("/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userId").is.a("number").eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").eq(user.email);
+                    expect(res.body).have.property("data").property("walletAddress").is.a("string").eq(user.wallet.address);
+                });
+        });
+
+        challengeIt("Update profile info", function (params) {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).post("/set/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .send(params)
+                .then((res) => {
+                    badRet(res);
+                });
+        }, {
+            nickname: "",
+            dialCode: "",
+            mobileNo: "",
+            profileImg: "",
+            lang: "",
+            country: "",
+            public: "",
+            type: ""
+        }, challenge);
+
+        if (challenge) {
+            it("Update profile info - challenge without JWT", function () {
+                let url = serviceUrl("/user/api");
+
+                return chai.request(url).post("/set/profile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .send({
+                        nickname: user.code,
+                        dialCode: null,
+                        mobileNo: null,
+                        lang: null,
+                        country: null,
+                        public: null,
+                        type: null
+                    })
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Update profile info", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).post("/set/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .send({
+                    nickname: user.code,
+                    dialCode: null,
+                    mobileNo: null,
+                    lang: null,
+                    country: null,
+                    public: null,
+                    type: null
+                })
+                .then((res) => {
+                    goodRet(res);
+                });
+        });
+
+        it("Verify profile", function () {
+            let url = serviceUrl("/user/api");
+
+            return chai.request(url).get("/profile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.jwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userId").is.a("number").eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").eq(user.email);
+                    expect(res.body).have.property("data").property("walletAddress").is.a("string").eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("nickname").is.a("string").eq(user.code);
+                });
+        });
+    });
+}
+
+export function mainProfile(user: User, challenge: boolean) {
+    describe('Suite: Individual Main Profile: ' + user.code + " (" + user.email + ")", function () {
+        let profileImgUrl: string;
+
+        if (challenge) {
+            it("Get profile - challenge without JWT", function () {
+                let url = mxwV1ServiceUrl("/provider/account/v1");
+
+                return chai.request(url).get("/getProfile")
+                    .type("application/json")
+                    .set("Authorization", "Bearer ")
+                    .then((res) => {
+                        badRet(res, "InvalidHeader");
+                    });
+            });
+        }
+
+        it("Get profile", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string");
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                });
+        });
+
+        challengeIt("Update profile", function (params) {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).post("/setProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .send(params)
+                .then((res) => {
+                    badRet(res);
+                });
+        }, {
+            alias: null,
+            country: "",
+            dialCode: null,
+            email: "",
+            lang: "",
+            mobileNo: null,
+            nickName: "",
+            profileImg: "",
+            public: null,
+            referralCode: null
+        }, challenge);
+
+        it("Update profile", function () {
+            return chai.request(mxwV1ServiceUrl("/provider/account/v1")).post("/setProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .send({
+                    alias: null,
+                    country: user.profile.country,
+                    dialCode: null,
+                    email: user.email,
+                    lang: user.profile.language,
+                    mobileNo: null,
+                    nickName: user.username,
+                    profileImg: "Believe me this is a real image url",
+                    public: 0,
+                    referralCode: null
+                })
+                .then((res) => {
+                    goodRet(res);
+                });
+        });
+
+        it("Verify profile", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string").is.eq(user.username);
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("country").is.a("string").is.eq(user.profile.country);
+                    expect(res.body).have.property("data").property("lang").is.a("string").is.eq(user.profile.language);
+                    expect(res.body).have.property("data").property("public").is.a("number");
+
+                    if (res.body.data.profileImg) {
+                        console.log("\x1b[33m%s", indent, "WARNING: This overwrite profile image bug is required to patch.", "\x1b[0m");
+                    }
+                    else {
+                        // console.log("\x1b[33m%s", indent, "WARNING: Special error handler is required to remove.", "\x1b[0m");
+                    }
+                });
+        });
+
+        if (challenge) {
+            it("Upload profile image - challenge without actionType", function () {
+                let url = mxwV1ServiceUrl("/provider/account/v1");
+                let params = {
+                    actionType: ""
+                };
+
+                return uploadOSS(user, url, "/profilePreupload", params, __dirname + "/resources/profile.jpg", "image/png").then((readUrl) => {
+                    throwError("SHOULD_NOT_REACH_HERE");
+                }).catch(error => {
+                    let { code, message } = describeError(error);
+
+                    if ("InvalidResponse" == code) {
+                        console.log("\x1b[33m%s", indent, "WARNING: This error is required to patch.", code + ":", message, "\x1b[0m");
+                    }
+                    else {
+                        console.log("\x1b[33m%s", indent, "WARNING: Special error handler is required to remove.", code, ":", message, "\x1b[0m");
+                    }
+                });
+            });
+        }
+
+        it("Upload profile image", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+            let params = {
+                actionType: "PROFILE"
+            };
+
+            return uploadOSS(user, url, "/profilePreupload", params, __dirname + "/resources/profile.jpg", "image/png").then((readUrl) => {
+                profileImgUrl = readUrl;
+                if (!HubService.Instance.silent) { console.log(indent, "Uploaded main profile image:", profileImgUrl) }
+            });
+        });
+
+        it("Verify profile image", function () {
+            let url = mxwV1ServiceUrl("/provider/account/v1");
+
+            return chai.request(url).get("/getProfile")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("userID").is.a("number").is.eq(user.id);
+                    expect(res.body).have.property("data").property("email").is.a("string").is.eq(user.email);
+                    expect(res.body).have.property("data").property("nickName").is.a("string").is.eq(user.username);
+                    expect(res.body).have.property("data").property("walletAddr").is.a("string").is.eq(user.wallet.address);
+                    expect(res.body).have.property("data").property("profileImg").is.a("string").is.eq(profileImgUrl);
+                    expect(res.body).have.property("data").property("country").is.a("string").is.eq(user.profile.country);
+                    expect(res.body).have.property("data").property("lang").is.a("string").is.eq(user.profile.language);
+                    expect(res.body).have.property("data").property("public").is.a("number");
+                });
+        });
+    });
+}

package/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/individual-whitelist.ts

@@ -0,0 +1,133 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import HubService, { User, goodRet, mxwServiceUrl, mxwV1ServiceUrl } from "./hub";
+import { toUtf8Bytes, sortObject } from 'mxw-libs-utils';
+import { utils, Wallet, auth } from 'mxw-sdk-js';
+import { JsonRpcProvider } from 'mxw-sdk-js/dist/providers';
+import { KYC_FLOW_ID, KYC_TYPE_ID } from './individual-kyc';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+export function whitelist(user: User, idType: KYC_TYPE_ID, wallet: Wallet, challenge: boolean) {
+    describe('Suite: Whitelist Wallet: ' + user.code + " (" + wallet.address + ")", function () {
+        it("Get KYC info", function () {
+            return chai.request(mxwServiceUrl("/provider/kyc/v2"))
+                .get("/getKycInfo")
+                .type("application/json")
+                .set("Authorization", "Bearer " + user.mxwJwt)
+                .query({
+                    kycId: user.kyc.kycId
+                })
+                .then((res) => {
+                    goodRet(res);
+                    expect(res.body).have.property("data").property("kycStatus").is.a("number");
+                    user.kyc.status = res.body.data.kycStatus;
+                });
+        });
+
+        // it("Initialize Maxonrow user account", function () {
+        //     let url = mxwServiceUrl("/user/api");
+
+        //     return chai.request(url).post("/initUser")
+        //         .type("application/json")
+        //         .set("Authorization", "Bearer " + user.mxwJwt)
+        //         .send({
+        //             walletAddress: wallet.address
+        //         }).then((res) => {
+        //             console.log(res.body)
+        //             goodRet(res);
+        //             expect(res.body).have.property("data").have.property("walletId").is.a("number").greaterThan(0);
+        //         });
+        // });
+
+        // it("Pre-check", function () {
+        //     let url = mxwV1ServiceUrl("/provider/kyc-proxy/v1");
+
+        //     return chai.request(url).post("/precheckEx")
+        //         .type("application/json")
+        //         .set("Authorization", "Bearer " + user.mxwJwt)
+        //         .set("app-id", String(HubService.Instance.appId))
+        //         .send({
+        //             kycId: user.kyc.kycId,
+        //             idType,
+        //             country: user.profile.country,
+        //             idNo: user.username
+        //         })
+        //         .then((res) => {
+        //             console.log(res.body)
+        //             goodRet(res);
+        //         });
+        // });
+
+        it("Submit whitelist transaction", function () {
+            if (KYC_FLOW_ID.MANUAL == user.kyc.flow) {
+                expect(user.kyc.status).is.a("number").to.be.oneOf([10], "KYC is not submitted");
+                this.skip();
+            }
+
+            expect(user.kyc.status).is.a("number").to.be.oneOf([1, 18], "KYC is not approved");
+
+            return signTransaction(wallet, user.profile.country, String(user.kyc.idType), 0, user.profile.dob, { nonce: "0" }).then((tx) => {
+                return chai.request(mxwServiceUrl("/wallet/api")).post("/whitelistWallet")
+                    .type("application/json")
+                    .set("Authorization", "Bearer " + user.mxwJwt)
+                    .send(tx).then((res) => {
+                        console.log(res.body)
+                        goodRet(res);
+                        expect(res.body).have.property("data").property("transactionHash").is.a("string").lengthOf.greaterThan(0);
+
+                        if (res.body.data.ret) {
+                            console.log("\x1b[33m%s", indent, "WARNING: The response is required to patch.", "\x1b[0m");
+                        }
+                        else {
+                            // console.log("\x1b[33m%s", indent, "WARNING: Special handler is required to remove.", "\x1b[0m");
+                        }
+                        return res.body.data.transactionHash;
+                    }).then((txHash) => {
+                        if (!HubService.Instance.silent) { console.log(indent, "Whitelisted:", wallet.address, "(" + txHash + ")") }
+                    });
+            });
+        });
+    });
+}
+
+function signTransaction(wallet: Wallet, country?: string, idType?: string, idExpiry?: number, dob?: number, overrides?: any) {
+    return auth.Kyc.create(wallet.connect(new JsonRpcProvider("https://"))).then((kyc) => {
+        let seed = utils.sha256(toUtf8Bytes(JSON.stringify(sortObject({
+            juridical: ["", ""].sort(),
+            seed: utils.getHash(utils.randomBytes(32))
+        }))));
+
+        let kycAddress = kyc.getKycAddress({
+            country,
+            idType,
+            id: wallet.address,
+            idExpiry,
+            dob,
+            seed
+        });
+
+        let nonce = (overrides && overrides.nonce) ? overrides.nonce : "0";
+
+        return kyc.sign(kycAddress, { nonce }).then((tx) => {
+            expect(tx).have.property("kyc").property("from").is.a("string").is.eq(wallet.address);
+            expect(tx).have.property("kyc").property("kycAddress").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("kyc").property("nonce").is.a("string").is.eq(nonce);
+            expect(tx).have.property("pub_key").property("type").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("pub_key").property("value").is.a("string").lengthOf.greaterThan(0);
+            expect(tx).have.property("signature").is.a("string").lengthOf.greaterThan(0);
+
+            return {
+                transaction: tx,
+                seed,
+                publicKey: wallet.publicKey
+            };
+        });
+    });
+}

package/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/tests/t-0200-start.ts

@@ -0,0 +1,172 @@
+'use strict';
+
+import { describe, it } from 'mocha';
+import chai, { expect } from 'chai';
+import chaihttp from 'chai-http';
+
+import { hexlify } from 'mxw-libs-utils';
+import { mxw, utils } from 'mxw-sdk-js';
+
+import HubService, { User } from "./hub";
+import { appOnboard, appReauth } from "./individual-onboard-app";
+import { webOnboard, changePassword, webReauth } from "./individual-onboard-web";
+import { profile, mainProfile } from "./individual-profile";
+import { kycByType, KYC_FLOW_ID, KYC_TYPE_ID } from './individual-kyc';
+import { whitelist } from './individual-whitelist';
+import { createContract } from './individual-contract';
+import { createContact } from './individual-contact';
+
+chai.use(chaihttp);
+
+let indent = "     ";
+
+describe('Suite: BDSS', function () {
+    it("Initialize", function () {
+        HubService.Instance.init(true);
+        if (!HubService.Instance.silent) { console.log(indent, "app id:", HubService.Instance.appId) }
+    });
+
+    it("Start", function () {
+        let infoList = [
+            {
+                code: "Ali",
+                username: "ali." + hexlify(utils.randomBytes(4)).substr(2),
+                password: utils.sha256(utils.toUtf8Bytes(hexlify(utils.randomBytes(5)).substr(2))),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: false,
+                profile: {
+                    language: "ms_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200101,
+                    religion: "Islam",
+                    address: {
+                        value: "",
+                        street: "1, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "43000",
+                        city: "Petaling Jaya",
+                        state: "Selangor",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.AUTO,
+                    ocrAlter: false
+                }
+            },
+            {
+                code: "AhKao",
+                username: "ahkao." + hexlify(utils.randomBytes(4)).substr(2),
+                password: hexlify(utils.randomBytes(5)).substr(2),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: true,
+                profile: {
+                    language: "en_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200102,
+                    religion: "Non-Islam",
+                    address: {
+                        value: "",
+                        street: "2, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "57000",
+                        city: "Kuala Lumpur",
+                        state: "Kuala Lumpur",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.MANUAL,
+                    ocrAlter: false
+                }
+            },
+            {
+                code: "Muthu",
+                username: "muthu." + hexlify(utils.randomBytes(4)).substr(2),
+                password: hexlify(utils.randomBytes(5)).substr(2),
+                domain: "hello-world.sh",
+                wallet: mxw.Wallet.createRandom(),
+                challenge: false,
+                firstRegisterOnWeb: false,
+                profile: {
+                    language: "ms_MY",
+                    gender: "M",
+                    country: "MY",
+                    dob: 20200103,
+                    religion: "Non-Islam",
+                    address: {
+                        value: "",
+                        street: "3, Jalan " + hexlify(utils.randomBytes(1)).substr(2) + "/" + hexlify(utils.randomBytes(1)).substr(2) + ", Taman " + hexlify(utils.randomBytes(4)).substr(2),
+                        postcode: "57000",
+                        city: "Kuala Lumpur",
+                        state: "Kuala Lumpur",
+                        province: "",
+                        country: "Malaysia"
+                    }
+                },
+                kyc: {
+                    idType: KYC_TYPE_ID.NATIONAL_ID,
+                    flow: KYC_FLOW_ID.AUTO,
+                    ocrAlter: true
+                }
+            }
+        ];
+
+        for (let info of infoList) {
+            let user = new User(info.code);
+
+            user.username = info.username;
+            user.password = info.password;
+            user.domain = info.domain;
+            user.wallet = info.wallet;
+            user.loginWallet = mxw.Wallet.fromMnemonic(user.wallet.mnemonic, "m/44'/118'/0'/0/30000");
+            user.profile = info.profile;
+            user.profile.address.value = user.profile.address.street + " " + user.profile.address.city + " " +
+                user.profile.address.postcode + " " + user.profile.address.state + " " + user.profile.address.country
+            user.kyc = info.kyc;
+
+            HubService.Instance.users[user.code] = user;
+
+            if (info.firstRegisterOnWeb) {
+                webOnboard(user, info.challenge);
+                appOnboard(user, info.challenge);
+            }
+            else {
+                appOnboard(user, info.challenge);
+                webOnboard(user, info.challenge);
+            }
+            // changePassword(user, info.challenge);
+            // mainProfile(user, info.challenge);
+            // profile(user, info.challenge);
+            kycByType(user, info.kyc.idType, info.kyc.flow, info.challenge);
+
+            // webReauth(user, info.challenge);
+            // appReauth(user, info.challenge);
+
+            whitelist(user, info.kyc.idType, user.wallet, info.challenge);
+            // whitelist(user, info.kyc.idType, user.loginWallet, info.challenge);
+        }
+
+        for (let i = 0; infoList.length > i; i++) {
+            let info = infoList[i];
+            let user = HubService.Instance.users[info.code];
+            let others: User[] = [];
+
+            for (let a = 0; infoList.length > a; a++) {
+                if (a == i) continue;
+                others.push(HubService.Instance.users[infoList[a].code]);
+            }
+
+            createContact(user, user, false);
+            // createContract(user, user.wallet, others, false);
+        }
+    });
+});

package/templates/k8s-deployment/services/charts/tests/charts/e2e-test-js/values.yaml

@@ -0,0 +1,59 @@
+enabled: false
+kind: Pod
+
+annotations:
+  "helm.sh/hook-weight": "10"
+  "helm.sh/hook": test-success
+
+image:
+  repository: registry-intl.cn-hongkong.aliyuncs.com/d_mxw/cm-e2e-test-js
+  tag: "1.0.9"
+  pullPolicy: IfNotPresent
+
+restartPolicy: Never
+
+script:
+  - make --no-print-directory -f/apps/script/Makefile start
+
+env:
+  RELEASE_NAME: "{{Release.Name}}"
+  CLUSTER_NAMESPACE: "{{CLUSTER_NAMESPACE}}"
+  CLUSTER_DOMAIN: "{{CLUSTER_DOMAIN}}"
+  CLUSTER_SERVICE_BASE_DOMAIN: "{{CLUSTER_NAMESPACE}}.svc.{{CLUSTER_DOMAIN}}"
+  EMAIL_SERVER_DOMAIN: ""
+  EMAIL_SERVER_URL: ""
+  SERVICE_BASE_INGRESS: ""
+  SERVICE_BASE_SCHEMA: "{{SERVICE_BASE_SCHEMA}}"
+  SERVICE_BASE_DOMAIN: "{{SERVICE_BASE_DOMAIN}}"
+  SERVICE_BASE_NAME: "{{SERVICE_BASE_NAME}}"
+  SERVICE_DOMAIN: "{{SERVICE_DOMAIN}}"
+  MXW_V1_SERVICE_BASE_SCHEMA: ""
+  MXW_V1_SERVICE_BASE_DOMAIN: ""
+  MXW_V1_SERVICE_BASE_NAME: ""
+  MXW_V1_SERVICE_DOMAIN: ""
+  MXW_SERVICE_BASE_SCHEMA: "{{MXW_SERVICE_BASE_SCHEMA}}"
+  MXW_SERVICE_BASE_DOMAIN: "{{MXW_SERVICE_BASE_DOMAIN}}"
+  MXW_SERVICE_BASE_NAME: "{{MXW_SERVICE_BASE_NAME}}"
+  MXW_SERVICE_DOMAIN: "{{MXW_SERVICE_DOMAIN}}"
+
+configFiles:
+  - name: script
+    files:
+    - "script/*"
+  - name: tests
+    files:
+    - "tests/*"
+
+volumeMounts:
+  - name: script-volume
+    mountPath: /apps/script
+  - name: tests-volume
+    mountPath: /apps/tests
+
+volumes:
+  - name: script-volume
+    configMap:
+      name: "{{Release.Name}}-{{Chart.Name}}-script"
+  - name: tests-volume
+    configMap:
+      name: "{{Release.Name}}-{{Chart.Name}}-tests"

package/templates/k8s-deployment/templates/_cluster-role-binding.tpl

@@ -0,0 +1,20 @@
+{{- define "root.cluster-role-binding" -}}
+{{- if and .Values.enabled .Values.ClusterRoleBinding -}}
+{{- if semverCompare ">=1.22-0" .Capabilities.KubeVersion.GitVersion -}}
+apiVersion: rbac.authorization.k8s.io/v1
+{{- else -}}
+apiVersion: rbac.authorization.k8s.io/v1beta1
+{{- end }}
+kind: ClusterRoleBinding
+metadata:
+  name: {{ include (print $.Chart.Name ".fullname") . | quote }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: {{ .Values.ClusterRoleBinding.name | quote }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include (print $.Chart.Name ".fullname") . | quote }}
+  namespace: {{ $.Release.Namespace | lower }}
+{{- end }}
+{{- end }}