added sa to scc

2022-04-06 22:07:43 +02:00 · 2022-04-06 22:07:43 +02:00 · 95cc0f28c2
commit 95cc0f28c2
parent f5cce7a5c3
2 changed files with 4 additions and 2 deletions
--- a/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml
+++ b/charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml
@ -22,7 +22,8 @@ requiredDropCapabilities:
 - ALL
 fsGroup:
  type: MustRunAs
-
+users:
+- system:serviceaccount:{{ .Release.Namespace }}:{{ include "ingress-nginx.fullname" . }}-admission
 priority: null
 readOnlyRootFilesystem: false
 runAsUser:
--- a/charts/ingress-nginx/templates/controller-scc.yaml
+++ b/charts/ingress-nginx/templates/controller-scc.yaml
@ -31,7 +31,8 @@ seLinuxContext:
  type: MustRunAs
 supplementalGroups:
  type: RunAsAny
-
+users:
+- system:serviceaccount:{{ .Release.Namespace }}:{{ template "ingress-nginx.serviceAccountName" . }}
 volumes:
 - configMap
 - downwardAPI