4ae52c8bd3
- As part of VAULT-571 / #703 in 7109159, a new vault.serverEnabled
template was added (and included in vault.mode)
Various templates were updated accordingly, but those that were
already calling vault.mode had an additonal call to
vault.serverEnabled made which was unnecessary
Remove those
20 lines
625 B
YAML
20 lines
625 B
YAML
{{ template "vault.mode" . }}
|
|
{{- if .serverEnabled -}}
|
|
{{- if and (ne .mode "") (eq (.Values.global.psp.enable | toString) "true") }}
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: {{ template "vault.fullname" . }}-psp
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
app.kubernetes.io/name: {{ include "vault.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
rules:
|
|
- apiGroups: ['policy']
|
|
resources: ['podsecuritypolicies']
|
|
verbs: ['use']
|
|
resourceNames:
|
|
- {{ template "vault.fullname" . }}
|
|
{{- end }}
|
|
{{- end }}
|