Files
Markus Schlotbohm 9a20026370 [stable/seq] Feature add psp (#18676)
* Add psp to chart stable/seq

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add variables to README.md, bump chart version

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add psp

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix apiGroup

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Chaged role from cluster role to role

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix role and rolebinding apiVersion

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Fix template clause in deployment

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Add securityContext to deployment

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Rebased from master and removed duplicated podSecurityPolicy.apiGroup template

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>

* Set privileged to false

Signed-off-by: Markus Schlotbohm <markus_schlotbohm@as-gmbh.de>
2020-01-30 16:10:19 -08:00

20 lines
573 B
YAML

{{- if and .Values.rbac.create .Values.podSecurityPolicy.create -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
labels:
app: {{ template "seq.name" . }}
chart: {{ template "seq.chart" . }}
release: {{ .Release.Name }}
heritage: {{ .Release.Service }}
name: {{ template "seq.fullname" . }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ template "seq.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ template "seq.serviceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end -}}