From 7fe88978fd7e65e140b7f763845c15157157dc58 Mon Sep 17 00:00:00 2001 From: farida azmy Date: Mon, 27 Sep 2021 20:57:13 +0200 Subject: [A1POLICYMANAGEMENT] Update chart with service account Add service account to requirements, values and deployment/statefulset. Issue-ID: OOM-2844 Signed-off-by: farida azmy Change-Id: I06c320e8bcf0f98fe65d31f4508177bd5d40a27d --- kubernetes/a1policymanagement/requirements.yaml | 3 +++ kubernetes/a1policymanagement/templates/statefulset.yaml | 1 + kubernetes/a1policymanagement/values.yaml | 6 +++++- 3 files changed, 9 insertions(+), 1 deletion(-) (limited to 'kubernetes/a1policymanagement') diff --git a/kubernetes/a1policymanagement/requirements.yaml b/kubernetes/a1policymanagement/requirements.yaml index ba5f5d5ea3..401f2e3c9f 100644 --- a/kubernetes/a1policymanagement/requirements.yaml +++ b/kubernetes/a1policymanagement/requirements.yaml @@ -24,3 +24,6 @@ dependencies: - name: repositoryGenerator version: ~8.x-0 repository: '@local' + - name: serviceAccount + version: ~8.x-0 + repository: '@local' diff --git a/kubernetes/a1policymanagement/templates/statefulset.yaml b/kubernetes/a1policymanagement/templates/statefulset.yaml index 54ee1515bc..1d25f31e7f 100644 --- a/kubernetes/a1policymanagement/templates/statefulset.yaml +++ b/kubernetes/a1policymanagement/templates/statefulset.yaml @@ -106,6 +106,7 @@ spec: - name: {{ include "common.fullname" . }} mountPath: "/var/policy-management-service/database" resources: {{ include "common.resources" . | nindent 10 }} + serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}} volumes: {{ include "common.certInitializer.volumes" . | nindent 8 }} - name: {{ include "common.fullname" . }}-policy-conf-input configMap: diff --git a/kubernetes/a1policymanagement/values.yaml b/kubernetes/a1policymanagement/values.yaml index 4768349736..0f7c00d235 100644 --- a/kubernetes/a1policymanagement/values.yaml +++ b/kubernetes/a1policymanagement/values.yaml @@ -159,4 +159,8 @@ persistence: mountPath: /dockerdata-nfs mountSubPath: nonrtric/policymanagementservice - +#Pods Service Account +serviceAccount: + nameOverride: a1policymanagement + roles: + - read -- cgit 1.2.3-korg