suggestions

Author: bigfluffycookie

chart/templates/role-app-subagents.yaml

@@ -1,3 +1,4 @@
+{{- if eq (index .Values.openopsEnv "OPS_SUBAGENTS_ENABLED") "true" }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -22,3 +23,4 @@ rules:
 - apiGroups: [""]
   resources: ["pods/log"]
   verbs: ["get"]
+{{- end }}

chart/templates/rolebinding-app-subagents.yaml

@@ -1,3 +1,4 @@
+{{- if eq (index .Values.openopsEnv "OPS_SUBAGENTS_ENABLED") "true" }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
@@ -20,3 +21,4 @@ subjects:
 - kind: ServiceAccount
   name: {{ include "openops.serviceAccountName" (dict "root" . "component" "app") }}
   namespace: {{ .Release.Namespace }}
+{{- end }}

chart/values.yaml

@@ -146,11 +146,11 @@ openopsEnv:
   # Subagent configuration
   OPS_SUBAGENTS_ENABLED: "false"
   OPS_SUBAGENT_EXECUTOR_TYPE: "k8s"
-  OPS_SUBAGENT_K8S_NAMESPACE: "{{ .Release.Namespace }}"
+  OPS_SUBAGENT_K8S_NAMESPACE: '{{ .Values.subagents.namespace | default .Release.Namespace }}'
   OPS_SUBAGENT_S3_BUCKET: ""
   OPS_SUBAGENT_S3_REGION: ""
   OPS_SUBAGENT_S3_ENDPOINT: ""
-  OPS_SUBAGENT_RUNNER_IMAGE: "535002847982.dkr.ecr.us-east-2.amazonaws.com/openops/subagent-runner:main"
+  OPS_SUBAGENT_RUNNER_IMAGE: "535002847982.dkr.ecr.us-east-2.amazonaws.com/openops/subagent-runner:0fdbc6b1"
 
 # Secret environment variables
 # Any var in this section is treated as a secret (stored in K8s Secret, referenced via secretKeyRef).