DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added sa to scc

Browse source
This commit is contained in:
Anas El Barkani 2022-04-06 22:07:43 +02:00
parent f5cce7a5c3
commit 95cc0f28c2
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
charts/ingress-nginx/templates/admission-webhooks/job-patch/scc.yaml
View file

@ -22,7 +22,8 @@ requiredDropCapabilities:
- ALL - ALL
fsGroup: fsGroup:
type: MustRunAs type: MustRunAs
users:
- system:serviceaccount:{{ .Release.Namespace }}:{{ include "ingress-nginx.fullname" . }}-admission
priority: null priority: null
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
runAsUser: runAsUser:

3
charts/ingress-nginx/templates/controller-scc.yaml
View file

@ -31,7 +31,8 @@ seLinuxContext:
type: MustRunAs type: MustRunAs
supplementalGroups: supplementalGroups:
type: RunAsAny type: RunAsAny
users:
- system:serviceaccount:{{ .Release.Namespace }}:{{ template "ingress-nginx.serviceAccountName" . }}
volumes: volumes:
- configMap - configMap
- downwardAPI - downwardAPI