aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common/serviceAccount/templates
AgeCommit message (Collapse)AuthorFilesLines
2024-12-03Adjust default role mapping of the common serviceAccount chartFiete Ostkamp1-87/+6
- make roles in serviceAccount chart configurable via role.read and role.create - change declaration of roles to work in environments with more restrictive RBAC rules Issue-ID: OOM-3323 Change-Id: I25ddd1a7cf26047b9098de03bbb8598dfd367133 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-07-05[COMMON] Fix Kyverno PoliciesAndreas Geissler2-1/+2
common: - Add settings to common pod templates and fix Cassandra serviceMesh and MariaDB operator templates - Added template for mongodb - Empty lines to files added readinessCheck: - Add missing security settings mariadb-init: - add security settings in job cassandra: - Empty lines added to files mongodb: - make emptyDir volume size configurable others: - update chart dependency for mongodb in components - fix linter errors in all files Issue-ID: OOM-3295 Issue-ID: OOM-3296 Change-Id: Ieb64be337013e0477f7aaca9c75bb6a3f3264848 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-12-08[COMMON] Add roles for hazelcast appsAndreas Geissler1-0/+3
CDS and CPS use hazelcast, which requires additional resource read permissions (endpoint, service, node) Added it to roles-wrapper and ServiceAccount templates Issue-ID: OOM-3250 Change-Id: I8360ba657054b2468df55dc529beedd9fc79bada Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-08-04[COMMON][SA] Add default role creation to ServiceAccountAndreas Geissler2-2/+109
Adds an option "createDefaultRoles" to create roles instead of using the roles-wrapper Issue-ID: OOM-3233 Change-Id: I03eb95b641034637fa218010025b2c452aba09d1 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2021-05-11[COMMON][ROLES] Create default roles onceSylvain Desbureaux3-84/+22
Instead of creating all roles every time with service account chart, let's just create the specific ones for a chart and point to default one for the three default roles. In order to lighten serviceAccount chart, whole logic for default role creation is in `roles-wrapper`. Issue-ID: OOM-2729 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib4d6a2669ca7d747320a4bccb65aac863eb60956
2020-07-06[COMMON] Allow to read replicaset statusSylvain Desbureaux1-0/+4
readiness check needs also to read replicaset status from extensions API. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie8f271ef7a4411340299ff7635594b66a1a1c8fd
2020-06-26[COMMON] Templates for services accounts and rolesSylvain Desbureaux3-0/+162
Create a common chart that will create the relevant service accounts / roles and role binding for ONAP components. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I687ef6debe679b5f7f250d75d93ee4da84d97104