Allow Disabling of ClusterRoles

- Add global.application.allowClusterRoles defaulted to true

Resolves charts/gitlab#1176

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

templates/application.yaml

@@ -80,12 +80,16 @@ spec:
     kind: ServiceAccount
   - apiVersion: rbac.authorization.k8s.io/v1
     kind: Role
+{{ if eq .Values.global.application.allowClusterRoles true -}}
   - apiVersion: rbac.authorization.k8s.io/v1
     kind: ClusterRole
+{{- end }}
   - apiVersion: rbac.authorization.k8s.io/v1
     kind: RoleBinding
+{{ if eq .Values.global.application.allowClusterRoles true -}}
   - apiVersion: rbac.authorization.k8s.io/v1
     kind: ClusterRoleBinding
+{{- end }}
   - apiVersion: batch/v1
     kind: Job
   - apiVersion: v1

values.yaml

@@ -31,6 +31,7 @@ global:
   application:
     create: false
     links: []
+    allowClusterRoles: true
   ## doc/charts/globals.md#configure-host-settings
   hosts:
     domain: example.com