YC: ClusterRoleBinding, config checksum, and resources
This commit is contained in:
parent
bad9aff0aa
commit
1aafbc3b81
5 changed files with 20 additions and 4 deletions
|
@ -1,3 +1,4 @@
|
||||||
|
{{- if .Values.installRbac }}
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
|
@ -54,6 +55,7 @@ rules:
|
||||||
resources:
|
resources:
|
||||||
- pods
|
- pods
|
||||||
- pods/exec
|
- pods/exec
|
||||||
|
- pods/log
|
||||||
- configmaps
|
- configmaps
|
||||||
- secrets
|
- secrets
|
||||||
- services
|
- services
|
||||||
|
@ -91,4 +93,4 @@ rules:
|
||||||
- update
|
- update
|
||||||
- patch
|
- patch
|
||||||
- delete
|
- delete
|
||||||
|
{{- end }}
|
||||||
|
|
|
@ -1,3 +1,4 @@
|
||||||
|
{{- if .Values.installRbac }}
|
||||||
# All argo-events services are bound to the "argo-events" service account.
|
# All argo-events services are bound to the "argo-events" service account.
|
||||||
# In RBAC enabled setups, this SA is bound to specific roles.
|
# In RBAC enabled setups, this SA is bound to specific roles.
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
|
@ -16,3 +17,4 @@ metadata:
|
||||||
namespace: {{ $namespace }}
|
namespace: {{ $namespace }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
|
@ -31,3 +31,5 @@ spec:
|
||||||
fieldPath: metadata.namespace
|
fieldPath: metadata.namespace
|
||||||
- name: CONTROLLER_CONFIG_MAP
|
- name: CONTROLLER_CONFIG_MAP
|
||||||
value: {{ .Release.Name }}-{{ .Values.gatewayController.name }}-configmap
|
value: {{ .Release.Name }}-{{ .Values.gatewayController.name }}-configmap
|
||||||
|
resources:
|
||||||
|
{{- toYaml .Values.gatewayController.resources | nindent 12 }}
|
||||||
|
|
|
@ -31,3 +31,5 @@ spec:
|
||||||
fieldPath: metadata.namespace
|
fieldPath: metadata.namespace
|
||||||
- name: CONTROLLER_CONFIG_MAP
|
- name: CONTROLLER_CONFIG_MAP
|
||||||
value: {{ .Release.Name }}-{{ .Values.sensorController.name }}-configmap
|
value: {{ .Release.Name }}-{{ .Values.sensorController.name }}-configmap
|
||||||
|
resources:
|
||||||
|
{{- toYaml .Values.sensorController.resources | nindent 12 }}
|
||||||
|
|
|
@ -21,8 +21,9 @@ spec:
|
||||||
{{- if .Values.controller.podLabels }}
|
{{- if .Values.controller.podLabels }}
|
||||||
{{ toYaml .Values.controller.podLabels | nindent 8}}
|
{{ toYaml .Values.controller.podLabels | nindent 8}}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.controller.podAnnotations }}
|
|
||||||
annotations:
|
annotations:
|
||||||
|
checksum/config-controller: {{ include (print $.Template.BasePath "/workflow-controller-config-map.yaml") . | sha256sum }}
|
||||||
|
{{- if .Values.controller.podAnnotations }}
|
||||||
{{ toYaml .Values.controller.podAnnotations | indent 8}}{{- end }}
|
{{ toYaml .Values.controller.podAnnotations | indent 8}}{{- end }}
|
||||||
spec:
|
spec:
|
||||||
serviceAccountName: {{ .Values.controller.serviceAccount | quote }}
|
serviceAccountName: {{ .Values.controller.serviceAccount | quote }}
|
||||||
|
@ -48,9 +49,16 @@ spec:
|
||||||
fieldPath: metadata.namespace
|
fieldPath: metadata.namespace
|
||||||
resources:
|
resources:
|
||||||
{{- toYaml .Values.controller.resources | nindent 12 }}
|
{{- toYaml .Values.controller.resources | nindent 12 }}
|
||||||
{{- if .Values.controller.metricsConfig.enabled }}
|
{{- if or .Values.controller.metricsConfig.enabled .Values.controller.telemetryConfig.enabled }}
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 8080
|
{{- if .Values.controller.metricsConfig.enabled }}
|
||||||
|
- containerPort: {{ .Values.controller.metricsConfig.port }}
|
||||||
|
name: metrics
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.controller.telemetryConfig.enabled }}
|
||||||
|
- containerPort: {{ .Values.controller.telemetryConfig.port }}
|
||||||
|
name: telemetry
|
||||||
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- with .Values.controller.nodeSelector }}
|
{{- with .Values.controller.nodeSelector }}
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
|
Loading…
Reference in a new issue