support singleNamespace option

Author: ATGardner

charts/gitops-runtime/Chart.yaml

@@ -37,8 +37,8 @@ dependencies:
   alias: tunnel-client
   condition: tunnel-client.enabled
 - name: codefresh-gitops-operator
-  repository: oci://quay.io/codefresh/charts
-  version: 0.2.5
+  repository: oci://quay.io/codefresh/charts/dev
+  version: 0.0.0-feat-cr-24670-namespaced-install
   alias: gitops-operator
   condition: gitops-operator.enabled
 - name: garage

charts/gitops-runtime/templates/app-proxy/workflows-crb.yaml

@@ -4,15 +4,18 @@
 {{- $_ := set $appProxyContext "Values" (get .Values "app-proxy") }}
 {{- $_ := set $appProxyContext.Values "global" (get .Values "global") }}
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
+kind: {{ $appProxyContext.Values.singleNamespace | ternary "RoleBinding" "ClusterRoleBinding" }}
 metadata:
   name: cap-app-proxy-argo-workflows
+  {{- if $appProxyContext.Values.singleNamespace }}
+  namespace: {{ .Release.Namespace }}
+  {{- end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
+  kind: {{ $appProxyContext.Values.singleNamespace | ternary "Role" "ClusterRole" }}
   name: {{ include "codefresh-gitops-runtime.argo-workflows.server.name" . }}
 subjects:
   - kind: ServiceAccount
     name: {{ include "cap-app-proxy.serviceAccountName" $appProxyContext }}
     namespace: {{ .Release.Namespace }}
-{{- end }}
+{{- end }}

charts/gitops-runtime/values.yaml

@@ -403,6 +403,7 @@ tunnel-client:
 #-----------------------------------------------------------------------------------------------------------------------
 app-proxy:
   replicaCount: 1
+  singleNamespace: false
   # -- Image enrichment process configuration
   image-enrichment:
     # -- Enable or disable enrichment process. Please note that for enrichemnt, argo-workflows has to be enabled as well.
@@ -582,6 +583,7 @@ gitops-operator:
     # -- Additional labels for gitops operator CRDs
     additionalLabels: {}
 
+  singleNamespace: false
   env: {}
   image: {}
     # -- defaults