{{- if .Values.portal.createAndUpgrade }}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ include "portalmodelo.fullname" . }}-scaleup
  labels:
    {{- include "portalmodelo.labels" . | nindent 4 }}
  annotations:
    "helm.sh/hook": pre-install,pre-upgrade
    "helm.sh/hook-weight": "-5"
    "helm.sh/hook-delete-policy": "before-hook-creation"
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: {{ include "portalmodelo.fullname" . }}-scaleup
  labels:
    {{- include "portalmodelo.labels" . | nindent 4 }}
  annotations:
    "helm.sh/hook": pre-install,pre-upgrade
    "helm.sh/hook-weight": "-5"
    "helm.sh/hook-delete-policy": "before-hook-creation"
rules:
  - apiGroups: ["apps"]
    resources: ["deployments", "deployments/scale"]
    verbs: ["get", "list", "patch", "update"]
    resourceNames: ["{{ include "portalmodelo.fullname" . }}-plone"]
  - apiGroups: ["batch"]
    resources: ["jobs"]
    verbs: ["get", "list", "watch"]
    resourceNames: ["{{ include "portalmodelo.fullname" . }}-plonecfg"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: {{ include "portalmodelo.fullname" . }}-scaleup
  labels:
    {{- include "portalmodelo.labels" . | nindent 4 }}
  annotations:
    "helm.sh/hook": pre-install,pre-upgrade
    "helm.sh/hook-weight": "-5"
    "helm.sh/hook-delete-policy": "before-hook-creation"
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: {{ include "portalmodelo.fullname" . }}-scaleup
subjects:
  - kind: ServiceAccount
    name: {{ include "portalmodelo.fullname" . }}-scaleup
    namespace: {{ .Release.Namespace }}
{{- end }}