[stable/kube2iam] #1785 namespace defined templates with chart name (#2132)

This commit is contained in:
Kevin Schumacher
2017-09-19 15:29:45 +05:30
committed by Dhilip
parent 2371ad93eb
commit a69698ddec
7 changed files with 27 additions and 27 deletions
+12 -12
View File
@@ -1,18 +1,18 @@
name: kube2iam
version: 0.5.4
version: 0.6.0
description: Provide IAM credentials to pods based on annotations.
keywords:
- kube2iam
- aws
- iam
- security
- kube2iam
- aws
- iam
- security
sources:
- https://github.com/jtblin/kube2iam
- https://github.com/jtblin/kube2iam
maintainers:
- name: Josh Carp
email: jm.carp@gmail.com
- name: Michael Haselton
email: michael.haselton@gmail.com
- name: Michael Goodness
email: mgoodness@gmail.com
- name: Josh Carp
email: jm.carp@gmail.com
- name: Michael Haselton
email: michael.haselton@gmail.com
- name: Michael Goodness
email: mgoodness@gmail.com
engine: gotpl
+1 -1
View File
@@ -1,6 +1,6 @@
To verify that kube2iam has started, run:
kubectl --namespace={{ .Release.Namespace }} get pods -l "app={{ template "name" . }},release={{ .Release.Name }}"
kubectl --namespace={{ .Release.Namespace }} get pods -l "app={{ template "kube2iam.name" . }},release={{ .Release.Name }}"
Add an iam.amazonaws.com/role annotation to your pods with the role you want them to assume.
+2 -2
View File
@@ -2,7 +2,7 @@
{{/*
Expand the name of the chart.
*/}}
{{- define "name" -}}
{{- define "kube2iam.name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
{{- end -}}
@@ -10,7 +10,7 @@ Expand the name of the chart.
Create a default fully qualified app name.
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
*/}}
{{- define "fullname" -}}
{{- define "kube2iam.fullname" -}}
{{- $name := default .Chart.Name .Values.nameOverride -}}
{{- if ne $name .Release.Name -}}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+2 -2
View File
@@ -3,11 +3,11 @@ apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
labels:
app: {{ template "name" . }}
app: {{ template "kube2iam.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version }}
heritage: {{ .Release.Service }}
release: {{ .Release.Name }}
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
rules:
- apiGroups:
- ""
@@ -3,17 +3,17 @@ apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
labels:
app: {{ template "name" . }}
app: {{ template "kube2iam.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version }}
heritage: {{ .Release.Service }}
release: {{ .Release.Name }}
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
namespace: {{ .Release.Namespace }}
{{- end -}}
+4 -4
View File
@@ -2,11 +2,11 @@ apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
labels:
app: {{ template "name" . }}
app: {{ template "kube2iam.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version }}
heritage: {{ .Release.Service }}
release: {{ .Release.Name }}
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
spec:
template:
metadata:
@@ -15,7 +15,7 @@ spec:
{{ toYaml .Values.podAnnotations | indent 8 }}
{{- end }}
labels:
app: {{ template "name" . }}
app: {{ template "kube2iam.name" . }}
release: {{ .Release.Name }}
{{- if .Values.podLabels }}
{{ toYaml .Values.podLabels | indent 8 }}
@@ -55,7 +55,7 @@ spec:
nodeSelector:
{{ toYaml .Values.nodeSelector | indent 8 }}
{{- end }}
serviceAccountName: {{ if .Values.rbac.create }}{{ template "fullname" . }}{{ else }}"{{ .Values.rbac.serviceAccountName }}"{{ end }}
serviceAccountName: {{ if .Values.rbac.create }}{{ template "kube2iam.fullname" . }}{{ else }}"{{ .Values.rbac.serviceAccountName }}"{{ end }}
tolerations:
{{ toYaml .Values.tolerations | indent 8 }}
{{- if and (eq .Capabilities.KubeVersion.Major "1") (gt .Capabilities.KubeVersion.Minor "5") }}
@@ -3,9 +3,9 @@ apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app: {{ template "name" . }}
app: {{ template "kube2iam.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version }}
heritage: {{ .Release.Service }}
release: {{ .Release.Name }}
name: {{ template "fullname" . }}
name: {{ template "kube2iam.fullname" . }}
{{- end -}}