Utilize helper function for spire-k8s-workload-registrar

Signed-off-by: Marco Franssen <[email protected]>
Signed-off-by: Marco Franssen <[email protected]>

charts/spire/charts/spire-server/templates/_helpers.tpl

@@ -84,3 +84,7 @@ Create the name of the service account to use
 {{- end -}}
 {{- end -}}
 {{- end }}
+
+{{- define "spire-k8s-workload-registrar.fullname" -}}
+{{ include "spire-server.fullname" . | trimSuffix "-server" }}-k8s-workload-registrar
+{{- end }}

charts/spire/charts/spire-server/templates/k8s-workload-registrar-configmap.yaml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
   namespace: {{ .Release.Namespace }}
 data:
   workload-registrar.conf: |

charts/spire/charts/spire-server/templates/k8s-workload-registrar-roles.yaml

@@ -4,7 +4,7 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
 rules:
   - apiGroups: [""]
     resources: ["pods", "nodes", "endpoints"]
@@ -13,11 +13,11 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
 subjects:
   - kind: ServiceAccount
     name: {{ include "spire-server.serviceAccountName" . }}
@@ -26,7 +26,7 @@ subjects:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
   namespace: {{ .Release.Namespace }}
 rules:
   - apiGroups: [""]
@@ -43,11 +43,11 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
   namespace: {{ .Release.Namespace }}
 roleRef:
   kind: Role
-  name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+  name: {{ include "spire-k8s-workload-registrar.fullname" . }}
   apiGroup: rbac.authorization.k8s.io
 subjects:
   - kind: ServiceAccount

charts/spire/charts/spire-server/templates/statefulset.yaml

@@ -127,7 +127,7 @@ spec:
         {{- if eq (.Values.k8sWorkloadRegistrar.enabled | toString) "true" }}
         - name: k8s-workload-registrar-config
           configMap:
-            name: {{ include "spire-server.fullname" . }}-k8s-workload-registrar
+            name: {{ include "spire-k8s-workload-registrar.fullname" . }}
         {{- end }}
   volumeClaimTemplates:
     {{- if eq (.Values.dataStorage.enabled | toString) "true" }}