Add clusterRole generator function

arm_exporter.jsonnet

@@ -26,28 +26,16 @@ local utils = import 'utils.libsonnet';
       clusterRoleBinding.withSubjects([{ kind: 'ServiceAccount', name: 'arm-exporter', namespace: $._config.namespace }]),
 
     clusterRole:
-      local clusterRole = k.rbac.v1.clusterRole;
+      utils.newClusterRole('arm-exporter', [
-      local policyRule = clusterRole.rulesType;
+        {apis: ['authentication.k8s.io'],
-
+         res: ['tokenreviews'],
-      local authenticationRole = policyRule.new() +
+         verbs: ['create']
-                                 policyRule.withApiGroups(['authentication.k8s.io']) +
+        },
-                                 policyRule.withResources([
+        {apis: ['authorization.k8s.io'],
-                                   'tokenreviews',
+         res: ['subjectaccessreviews'],
-                                 ]) +
+         verbs: ['create']
-                                 policyRule.withVerbs(['create']);
+        }
-
+      ]),
-      local authorizationRole = policyRule.new() +
-                                policyRule.withApiGroups(['authorization.k8s.io']) +
-                                policyRule.withResources([
-                                  'subjectaccessreviews',
-                                ]) +
-                                policyRule.withVerbs(['create']);
-
-      local rules = [authenticationRole, authorizationRole];
-
-      clusterRole.new() +
-      clusterRole.mixin.metadata.withName('arm-exporter') +
-      clusterRole.withRules(rules),
 
     serviceAccount:
       local serviceAccount = k.core.v1.serviceAccount;

utils.libsonnet

@@ -11,6 +11,30 @@ local vars = import 'vars.jsonnet';
         aux(arr, i + 1, running + arr[i]) tailstrict;
     aux(objs, 0, {}),
 
+  // Creates ClusterRoles
+  // roles format example: {apis: ['authentication.k8s.io'],
+  //                        res: ['tokenreviews'],
+  //                        verbs: ['create']
+  //                       }
+    newClusterRole(name, roles):: (
+      local clusterRole = k.rbac.v1.clusterRole;
+      local policyRule = clusterRole.rulesType;
+
+      local p(apigroups, resources, verbs) = policyRule.new() +
+                  policyRule.withApiGroups([a for a in apigroups]) +
+                  policyRule.withResources([r for r in resources]) +
+                  policyRule.withVerbs([v for v in verbs]);
+
+      local r = [ p(pol.apis, pol.res, pol.verbs) for pol in roles ];
+
+      local rules = r;
+
+      local c = clusterRole.new() +
+        clusterRole.mixin.metadata.withName(name) +
+        clusterRole.withRules(rules);
+      c
+    ),
+
   // Creates endpoint objects
   newEndpoint(name, namespace, ips, portName, portNumber):: (
     local endpoints = k.core.v1.endpoints;