aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/common/serviceAccount
AgeCommit message (Collapse)AuthorFilesLines
2024-12-03Adjust default role mapping of the common serviceAccount chartFiete Ostkamp3-90/+122
- make roles in serviceAccount chart configurable via role.read and role.create - change declaration of roles to work in environments with more restrictive RBAC rules Issue-ID: OOM-3323 Change-Id: I25ddd1a7cf26047b9098de03bbb8598dfd367133 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
2024-08-07[COMMON] Synchronize common chartsAndreas Geissler1-1/+1
- solve actual findings during tests with kyverno policies - synchronize headers Issue-ID: OOM-3288 Issue-ID: OOM-3296 Change-Id: Ia7e7daa8864069493e09dd6511825aa939c5eeaf Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2024-07-05[COMMON] Fix Kyverno PoliciesAndreas Geissler4-2/+35
common: - Add settings to common pod templates and fix Cassandra serviceMesh and MariaDB operator templates - Added template for mongodb - Empty lines to files added readinessCheck: - Add missing security settings mariadb-init: - add security settings in job cassandra: - Empty lines added to files mongodb: - make emptyDir volume size configurable others: - update chart dependency for mongodb in components - fix linter errors in all files Issue-ID: OOM-3295 Issue-ID: OOM-3296 Change-Id: Ieb64be337013e0477f7aaca9c75bb6a3f3264848 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-12-08[COMMON] Add roles for hazelcast appsAndreas Geissler1-0/+3
CDS and CPS use hazelcast, which requires additional resource read permissions (endpoint, service, node) Added it to roles-wrapper and ServiceAccount templates Issue-ID: OOM-3250 Change-Id: I8360ba657054b2468df55dc529beedd9fc79bada Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-08-04[COMMON][SA] Add default role creation to ServiceAccountAndreas Geissler4-5/+122
Adds an option "createDefaultRoles" to create roles instead of using the roles-wrapper Issue-ID: OOM-3233 Change-Id: I03eb95b641034637fa218010025b2c452aba09d1 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
2023-06-29[COMMON] Bump ONAP versionAndreas Geissler1-2/+2
Update chart versions to 13.0.0 for Montreal Issue-ID: OOM-3173 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ie53fd021f01e459c464e44f4459a73ba0b00c172
2022-11-10[COMMON] Bump ONAP versionAndreas Geissler1-2/+2
Update chart versions 12.0.0 for London Issue-ID: OOM-3046 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Ic196235ff4f6ae14a7ecad799bd75a9666b2594a
2022-06-24[COMMON] Bump ONAP versionAndreas Geissler1-2/+2
Use version 11.0.0 for Kohn Issue-ID: OOM-2971 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de> Change-Id: Icc0e0839fc6def2035383b5fa4c9153fc15fafda
2021-12-07[GLOBAL] Migrate to helm v3efiacor2-21/+8
Move all Chart.yaml to use apiVersion: 2 Move dependencies from requirements.yaml to Chart.yaml Changes to all makeFiles Changes to helm deploy plugin Signed-off-by: efiacor <fiachra.corcoran@est.tech> Change-Id: I03c5290eee9e40f76eacbf171e774204cf5fb1c0 Issue-ID: OOM-2845
2021-10-15[COMMON] Bump ONAP versionSylvain Desbureaux2-2/+4
Use version 9.0.0 for Istanbul Also update the doc. Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I03e11799bf487226784c98b04116f005c89d1e70
2021-05-11[COMMON][ROLES] Create default roles onceSylvain Desbureaux4-84/+29
Instead of creating all roles every time with service account chart, let's just create the specific ones for a chart and point to default one for the three default roles. In order to lighten serviceAccount chart, whole logic for default role creation is in `roles-wrapper`. Issue-ID: OOM-2729 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ib4d6a2669ca7d747320a4bccb65aac863eb60956
2021-03-24[DOC][COMMON] Prepare Honolulu releaseSylvain Desbureaux2-2/+2
Updating the documentation and bumping version to 8.0.0 Issue-ID: OOM-1 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I6f942f1466fed64264c44fb8fc0e1ffc93a98f18
2020-11-30[COMMON][DOC] Bump version GuilinSylvain Desbureaux2-2/+2
Update charts and requirements to 7.0.0. Create release notes for Guilin Update documentation Issue-ID: OOM-2638 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I965ed6b6ebb7d74bfddaff73edd3dd55a657841c
2020-07-06[COMMON] Allow to read replicaset statusSylvain Desbureaux1-0/+4
readiness check needs also to read replicaset status from extensions API. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: Ie8f271ef7a4411340299ff7635594b66a1a1c8fd
2020-06-26[COMMON] Templates for services accounts and rolesSylvain Desbureaux6-0/+227
Create a common chart that will create the relevant service accounts / roles and role binding for ONAP components. Issue-ID: OOM-1971 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com> Change-Id: I687ef6debe679b5f7f250d75d93ee4da84d97104