From 3058f3b704e47bd1d1ee6f4dd88f1fcb422b7db3 Mon Sep 17 00:00:00 2001
From: drew0ps <ad.marton@proton.me>
Date: Wed, 25 Jun 2025 15:02:22 +0200
Subject: [PATCH] feat(helm): add support for disabling RBAC via rbac.enabled
 flag

---
 helm/templates/service.yaml | 2 ++
 helm/values.yaml            | 5 +++++
 2 files changed, 7 insertions(+)

diff --git a/helm/templates/service.yaml b/helm/templates/service.yaml
index a414f2a..0c9854d 100644
--- a/helm/templates/service.yaml
+++ b/helm/templates/service.yaml
@@ -1,3 +1,4 @@
+{{ if .Values.rbac.enabled }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -29,6 +30,7 @@ subjects:
 - kind: ServiceAccount
   name: {{ .Values.serviceAccount.name | quote }}
 ---
+{{- end }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
diff --git a/helm/values.yaml b/helm/values.yaml
index 7ae1a1c..67bcb3a 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -5,6 +5,11 @@ url: ""
 # If unspecified, this defaults to the Helm namespace.
 namespace: ""
 
+# rbac -- Specifies whether the RBAC components are installed.
+# If enabled is set to false, the RBAC components must be installed outside of the Helm Chart
+rbac:
+  enabled: true
+
 # volumes -- A list of extra volumes to add to the coder-logstream pod.
 volumes:
   #   emptyDir: {}