mirror of
https://github.com/helm/charts.git
synced 2026-08-23 22:37:45 +00:00
[stable/nfs-client-provisioner] Rename podSecurityPolicy support (#7481)
* Update version to 3.0.2 Signed-off-by: Bart Verwilst <bart@verwilst.be> * Add PodSecurityPolicy support Signed-off-by: Bart Verwilst <bart@verwilst.be> * update docs for psp Signed-off-by: Bart Verwilst <bart@verwilst.be> * add serviceaccount docs Signed-off-by: Bart Verwilst <bart@verwilst.be> * rename psp support Signed-off-by: Bart Verwilst <bart@verwilst.be> * Bump version Signed-off-by: Bart Verwilst <bart@verwilst.be> * new major version Signed-off-by: Bart Verwilst <bart@verwilst.be> * test psp Signed-off-by: Bart Verwilst <bart@verwilst.be>
This commit is contained in:
committed by
k8s-ci-robot
parent
166e2c9e36
commit
05af0791d1
@@ -3,7 +3,7 @@ appVersion: 3.0.2
|
||||
description: nfs-client is an automatic provisioner that used your *already configured* NFS server, automatically creating Persistent Volumes.
|
||||
name: nfs-client-provisioner
|
||||
home: https://github.com/kubernetes-incubator/external-storage/tree/master/nfs-client
|
||||
version: 0.1.3
|
||||
version: 1.0.0
|
||||
sources:
|
||||
- https://github.com/kubernetes-incubator/external-storage/tree/master/nfs-client
|
||||
maintainers:
|
||||
|
||||
@@ -60,6 +60,6 @@ The following tables lists the configurable parameters of this chart and their d
|
||||
| `nfs.path` | Basepath of the mount point to be used | `/ifs/kubernetes` |
|
||||
| `resources` | Resources required (e.g. CPU, memory) | `{}` |
|
||||
| `rbac.create` | Use Role-based Access Control | `true` |
|
||||
| `rbac.pspEnabled` | Create & use Pod Security Policy resources | `false` |
|
||||
| `podSecurityPolicy.enabled` | Create & use Pod Security Policy resources | `false` |
|
||||
| `serviceAccount.create` | Should we create a ServiceAccount | `true` |
|
||||
| `serviceAccount.name` | Name of the ServiceAccount to use | null |
|
||||
|
||||
@@ -1,2 +1,4 @@
|
||||
nfs:
|
||||
server: 127.0.0.1
|
||||
podSecurityPolicy:
|
||||
enabled: true
|
||||
|
||||
@@ -23,7 +23,7 @@ rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["endpoints"]
|
||||
verbs: ["get", "list", "watch", "create", "update", "patch"]
|
||||
{{- if .Values.rbac.pspEnabled }}
|
||||
{{- if .Values.podSecurityPolicy.enabled }}
|
||||
- apiGroups: ['extensions']
|
||||
resources: ['podsecuritypolicies']
|
||||
verbs: ['use']
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
{{- if .Values.rbac.pspEnabled }}
|
||||
{{- if .Values.podSecurityPolicy.enabled }}
|
||||
apiVersion: extensions/v1beta1
|
||||
kind: PodSecurityPolicy
|
||||
metadata:
|
||||
|
||||
@@ -43,9 +43,10 @@ rbac:
|
||||
# Specifies whether RBAC resources should be created
|
||||
create: true
|
||||
|
||||
# If true, create & use Pod Security Policy resources
|
||||
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
pspEnabled: false
|
||||
# If true, create & use Pod Security Policy resources
|
||||
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
|
||||
podSecurityPolicy:
|
||||
enabled: false
|
||||
|
||||
serviceAccount:
|
||||
# Specifies whether a ServiceAccount should be created
|
||||
|
||||
Reference in New Issue
Block a user