rename and split helm template files

helm/namespace/templates/namespace-manager-role.yaml

@@ -55,50 +55,3 @@ rules:
   verbs:
     - list
     - get
----
-kind: Role
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: namespace-readonly
-  namespace: {{ .Release.Name }}
-rules:
-- apiGroups:
-    - ""
-    - extensions
-    - apps
-    - batch
-    - autoscaling
-    - networking.k8s.io
-    - traefik.containo.us
-    - rbac.authorization.k8s.io
-    - metrics.k8s.io
-    - storage.k8s.io
-  resources: 
-    - deployments
-    - replicasets
-    - pods
-    - pods/exec
-    - pods/log
-    - pods/attach
-    - daemonsets
-    - statefulsets
-    - replicationcontrollers
-    - horizontalpodautoscalers
-    - services
-    - ingresses
-    - persistentvolumeclaims
-    - jobs
-    - cronjobs
-    - secrets
-    - configmaps
-    - serviceaccounts
-    - rolebindings
-    - ingressroutes
-    - middlewares
-    - resourcequotas
-    - roles
-    - endpoints
-    - clusterroles
-  verbs: 
-    - list
-    - watch

helm/namespace/templates/namespace-manager-rolebinding.yaml

@@ -11,16 +11,3 @@ roleRef:
   kind: Role
   name: namespace-manager
   apiGroup: ""
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: user-readonly
-subjects:
-- kind: User
-  name: {{ .Values.user }}
-  apiGroup: ""
-roleRef:
-  kind: ClusterRole
-  name: user-readonly
-  apiGroup: ""

helm/namespace/templates/namespace-readonly-role.yaml

@@ -0,0 +1,46 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: namespace-readonly
+  namespace: {{ .Release.Name }}
+rules:
+- apiGroups:
+    - ""
+    - extensions
+    - apps
+    - batch
+    - autoscaling
+    - networking.k8s.io
+    - traefik.containo.us
+    - rbac.authorization.k8s.io
+    - metrics.k8s.io
+    - storage.k8s.io
+  resources: 
+    - deployments
+    - replicasets
+    - pods
+    - pods/exec
+    - pods/log
+    - pods/attach
+    - daemonsets
+    - statefulsets
+    - replicationcontrollers
+    - horizontalpodautoscalers
+    - services
+    - ingresses
+    - persistentvolumeclaims
+    - jobs
+    - cronjobs
+    - secrets
+    - configmaps
+    - serviceaccounts
+    - rolebindings
+    - ingressroutes
+    - middlewares
+    - resourcequotas
+    - roles
+    - endpoints
+    - clusterroles
+  verbs: 
+    - list
+    - watch

helm/namespace/templates/namespace-readonly-rolebinding.yaml

@@ -0,0 +1,12 @@
+kind: ClusterRoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: user-readonly
+subjects:
+- kind: User
+  name: {{ .Values.user }}
+  apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: user-readonly
+  apiGroup: ""