feat: Adding support for k8s webhooks secret store

.gitignore

@@ -1,4 +1,5 @@
 *.tgz
 .vscode/
 dryrun.yaml
+license.txt
 test-values.yaml

charts/wandb/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: wandb
 description: A Helm chart for deploying W&B to Kubernetes
 type: application
-version: 0.2.3
-appVersion: "0.42.0"
+version: 0.3.0
+appVersion: "0.44.0"
 icon: https://wandb.ai/logo.svg
 maintainers:
   - name: wandb

charts/wandb/templates/role.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: secret-manager-role
+  labels:
+  {{- include "wandb.labels" . | nindent 4 }}
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "create", "update", "delete"]
+  - apiGroups: [""]
+    resources: ["namespaces"]
+    verbs: ["get"]
+...

charts/wandb/templates/rolebinding.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: wandb-secret-manager-binding
+  labels:
+  {{- include "wandb.labels" . | nindent 4 }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ include "wandb.serviceAccountName" . }}
+roleRef:
+  kind: Role
+  name: secret-manager-role
+  apiGroup: rbac.authorization.k8s.io
+...