mirror of
https://github.com/helm/charts.git
synced 2026-08-23 22:37:45 +00:00
[stable/kube-state-metrics] Only create PSP RBAC if rbac.create is true. (#19986)
Signed-off-by: Cédric de Saint Martin <cdesaintmartin@wiremind.fr>
This commit is contained in:
@@ -6,7 +6,7 @@ keywords:
|
||||
- monitoring
|
||||
- prometheus
|
||||
- kubernetes
|
||||
version: 2.8.0
|
||||
version: 2.8.1
|
||||
appVersion: 1.9.5
|
||||
home: https://github.com/kubernetes/kube-state-metrics/
|
||||
sources:
|
||||
|
||||
@@ -28,7 +28,7 @@ $ helm install stable/kube-state-metrics
|
||||
| `serviceAccount.create` | If true, create & use serviceAccount | `true` |
|
||||
| `serviceAccount.name` | If not set & create is true, use template fullname | |
|
||||
| `serviceAccount.imagePullSecrets` | Specify image pull secrets field | `[]` |
|
||||
| `podSecurityPolicy.enabled` | If true, create & use PodSecurityPolicy resources | `false` |
|
||||
| `podSecurityPolicy.enabled` | If true, create & use PodSecurityPolicy resources. Note that related RBACs are created only if `rbac.enabled` is `true. | `false` |
|
||||
| `podSecurityPolicy.annotations` | Specify pod annotations in the pod security policy | {} |
|
||||
| `securityContext.enabled` | Enable security context | `true` |
|
||||
| `securityContext.fsGroup` | Group ID for the container | `65534` |
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
{{- if and .Values.podSecurityPolicy.enabled -}}
|
||||
{{- if and .Values.podSecurityPolicy.enabled .Values.rbac.enabled -}}
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
{{- if and .Values.podSecurityPolicy.enabled -}}
|
||||
{{- if and .Values.podSecurityPolicy.enabled .Values.rbac.enabled -}}
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
|
||||
Reference in New Issue
Block a user