[stable/nfs-client-provisioner] Rename podSecurityPolicy support (#7481)

* Update version to 3.0.2

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* Add PodSecurityPolicy support

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* update docs for psp

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* add serviceaccount docs

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* rename psp support

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* Bump version

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* new major version

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* test psp

Signed-off-by: Bart Verwilst <bart@verwilst.be>
This commit is contained in:
Bort Verwilst
2018-09-01 01:00:14 -07:00
committed by k8s-ci-robot
parent 166e2c9e36
commit 05af0791d1
6 changed files with 10 additions and 7 deletions
+1 -1
View File
@@ -3,7 +3,7 @@ appVersion: 3.0.2
description: nfs-client is an automatic provisioner that used your *already configured* NFS server, automatically creating Persistent Volumes.
name: nfs-client-provisioner
home: https://github.com/kubernetes-incubator/external-storage/tree/master/nfs-client
version: 0.1.3
version: 1.0.0
sources:
- https://github.com/kubernetes-incubator/external-storage/tree/master/nfs-client
maintainers:
+1 -1
View File
@@ -60,6 +60,6 @@ The following tables lists the configurable parameters of this chart and their d
| `nfs.path` | Basepath of the mount point to be used | `/ifs/kubernetes` |
| `resources` | Resources required (e.g. CPU, memory) | `{}` |
| `rbac.create` | Use Role-based Access Control | `true` |
| `rbac.pspEnabled` | Create & use Pod Security Policy resources | `false` |
| `podSecurityPolicy.enabled` | Create & use Pod Security Policy resources | `false` |
| `serviceAccount.create` | Should we create a ServiceAccount | `true` |
| `serviceAccount.name` | Name of the ServiceAccount to use | null |
@@ -1,2 +1,4 @@
nfs:
server: 127.0.0.1
podSecurityPolicy:
enabled: true
@@ -23,7 +23,7 @@ rules:
- apiGroups: [""]
resources: ["endpoints"]
verbs: ["get", "list", "watch", "create", "update", "patch"]
{{- if .Values.rbac.pspEnabled }}
{{- if .Values.podSecurityPolicy.enabled }}
- apiGroups: ['extensions']
resources: ['podsecuritypolicies']
verbs: ['use']
@@ -1,4 +1,4 @@
{{- if .Values.rbac.pspEnabled }}
{{- if .Values.podSecurityPolicy.enabled }}
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
+4 -3
View File
@@ -43,9 +43,10 @@ rbac:
# Specifies whether RBAC resources should be created
create: true
# If true, create & use Pod Security Policy resources
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
pspEnabled: false
# If true, create & use Pod Security Policy resources
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
podSecurityPolicy:
enabled: false
serviceAccount:
# Specifies whether a ServiceAccount should be created