github/Reloader
1
0
Fork 0
mirror of https://github.com/stakater/Reloader.git synced 2026-08-19 20:16:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #65 from blurpy/filesys_and_role

Browse Source 
Fix issue with readOnlyRootFilesystem and statefulsets permissions
This commit is contained in:
Ali Kahoot
2019-06-11 12:13:13 +05:00
committed by GitHub
parent 67913c9985 b5c8ee2ab9
commit ce96eb3810
7 changed files with 62 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployments/kubernetes/chart/reloader/templates/clusterrole.yaml
+11 -2
View File
@@ -15,7 +15,7 @@ metadata:
rules:
- apiGroups:
- ""
resources:
resources:
- secrets
- configmaps
verbs:
@@ -23,7 +23,6 @@ rules:
- get
- watch
- apiGroups:
- "extensions"
- "apps"
resources:
- deployments
@@ -34,4 +33,14 @@ rules:
- get
- update
- patch
- apiGroups:
- "extensions"
resources:
- deployments
- daemonsets
verbs:
- list
- get
- update
- patch
{{- end }}
deployments/kubernetes/chart/reloader/templates/deployment.yaml
+10
View File
@@ -70,6 +70,11 @@ spec:
image: "{{ .Values.reloader.deployment.image.name }}:{{ .Values.reloader.deployment.image.tag }}"
imagePullPolicy: {{ .Values.reloader.deployment.image.pullPolicy }}
name: {{ template "reloader-name" . }}
{{- if eq .Values.reloader.readOnlyRootFileSystem true }}
volumeMounts:
- mountPath: /tmp/
name: tmp-volume
{{- end }}
{{- if .Values.reloader.custom_annotations }}
args:
{{- if .Values.reloader.custom_annotations.configmap }}
@@ -86,3 +91,8 @@ spec:
{{- end }}
{{- end }}
serviceAccountName: {{ template "reloader-serviceAccountName" . }}
{{- if eq .Values.reloader.readOnlyRootFileSystem true }}
volumes:
- emptyDir: {}
name: tmp-volume
{{- end }}
deployments/kubernetes/chart/reloader/templates/role.yaml
+11 -2
View File
@@ -15,7 +15,7 @@ metadata:
rules:
- apiGroups:
- ""
resources:
resources:
- secrets
- configmaps
verbs:
@@ -23,7 +23,6 @@ rules:
- get
- watch
- apiGroups:
- "extensions"
- "apps"
resources:
- deployments
@@ -34,4 +33,14 @@ rules:
- get
- update
- patch
- apiGroups:
- "extensions"
resources:
- deployments
- daemonsets
verbs:
- list
- get
- update
- patch
{{- end }}
deployments/kubernetes/chart/reloader/values.yaml
+3 -1
View File
@@ -5,6 +5,8 @@ kubernetes:
reloader:
watchGlobally: true
# Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
readOnlyRootFileSystem: false
matchLabels: {}
deployment:
annotations: {}
@@ -40,4 +42,4 @@ reloader:
# custom_annotations:
# configmap: "my.company.com/configmap"
# secret: "my.company.com/secret"
custom_annotations: {}
custom_annotations: {}
deployments/kubernetes/manifests/clusterrole.yaml
+11 -2
View File
@@ -14,7 +14,7 @@ metadata:
rules:
- apiGroups:
- ""
resources:
resources:
- secrets
- configmaps
verbs:
@@ -22,7 +22,6 @@ rules:
- get
- watch
- apiGroups:
- "extensions"
- "apps"
resources:
- deployments
@@ -33,4 +32,14 @@ rules:
- get
- update
- patch
- apiGroups:
- "extensions"
resources:
- deployments
- daemonsets
verbs:
- list
- get
- update
- patch
deployments/kubernetes/reloader.yaml
+13 -4
View File
@@ -15,7 +15,7 @@ metadata:
group: com.stakater.platform
provider: stakater
version: v0.0.29
name: reloader
spec:
replicas: 1
@@ -34,7 +34,7 @@ spec:
group: com.stakater.platform
provider: stakater
version: v0.0.29
spec:
containers:
- env:
@@ -59,7 +59,7 @@ metadata:
rules:
- apiGroups:
- ""
resources:
resources:
- secrets
- configmaps
verbs:
@@ -67,7 +67,6 @@ rules:
- get
- watch
- apiGroups:
- "extensions"
- "apps"
resources:
- deployments
@@ -78,6 +77,16 @@ rules:
- get
- update
- patch
- apiGroups:
- "extensions"
resources:
- deployments
- daemonsets
verbs:
- list
- get
- update
- patch
---
# Source: reloader/templates/rolebinding.yaml
deployments/kubernetes/templates/chart/values.yaml.tmpl
+3 -1
View File
@@ -5,6 +5,8 @@ kubernetes:
reloader:
watchGlobally: true
# Set to true if you have a pod security policy that enforces readOnlyRootFilesystem
readOnlyRootFileSystem: false
matchLabels: {}
deployment:
annotations: {}
@@ -40,4 +42,4 @@ reloader:
# custom_annotations:
# configmap: "my.company.com/configmap"
# secret: "my.company.com/secret"
custom_annotations: {}
custom_annotations: {}