diff options
author | 2019-07-31 14:11:31 -0700 | |
---|---|---|
committer | 2019-08-06 13:46:52 +0000 | |
commit | 5c2e32383495486611c1a8976fc937129414933d (patch) | |
tree | 63e66a50d98211f4162c9fe95e0dcf67eaddb2fd /vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml | |
parent | c453b17f1d0144ca0e084da00f2e55de5e922d31 (diff) |
Helm charts for Metallb
Metallb is a loadbalancer for Kubernetes
Issue-ID: MULTICLOUD-747
Signed-off-by: Pramod <pramod.raghavendra.jayathirth@intel.com>
Change-Id: If5501da743ad37c6e343a0f460f0674d1554704c
Diffstat (limited to 'vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml')
-rw-r--r-- | vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml b/vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml new file mode 100644 index 00000000..891aeb60 --- /dev/null +++ b/vnfs/DAaaS/deploy/00-init/metallb/templates/psp.yaml @@ -0,0 +1,33 @@ +{{- if .Values.psp.create -}} + +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ template "metallb.fullname" . }}-speaker + labels: + heritage: {{ .Release.Service | quote }} + release: {{ .Release.Name | quote }} + chart: {{ template "metallb.chart" . }} + app: {{ template "metallb.name" . }} +spec: + hostNetwork: true + hostPorts: + - min: 7472 + max: 7472 + privileged: true + allowPrivilegeEscalation: false + allowedCapabilities: + - 'NET_ADMIN' + - 'NET_RAW' + - 'SYS_ADMIN' + volumes: + - '*' + fsGroup: + rule: RunAsAny + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny +{{- end -}} |