Files
Etienne 25f7b3314c [stable/elastalert] Add ServiceAccount and PodSecurityPolicy to Elastalert (#21850)
* Add ServiceAccount and PodSecurityPolicy to Elastalert

Signed-off-by: Etienne Tremel <etienne@kogusenn.com>

* Use podSecurityPolicy.create

Signed-off-by: Etienne Tremel <etienne@kogusenn.com>
2020-04-10 06:37:47 -07:00

19 lines
553 B
YAML

{{- if .Values.podSecurityPolicy.create }}
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
name: {{ template "elastalert.fullname" . }}
labels:
app: {{ template "elastalert.name" . }}
chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
release: {{ .Release.Name }}
heritage: {{ .Release.Service }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ template "elastalert.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ template "elastalert.serviceAccountName" . }}
{{- end -}}