kubernetes-sigs
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

create the service account and roles even if the rbac is not enabled. it will just be ignored

pull/3102/head
Erwan Miran 2018-08-22 18:17:11 +02:00
parent 80cfeea957
commit a6a14e7f77
4 changed files with 0 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubernetes-apps/ansible/templates/netchecker-agent-ds.yml.j2
View File

@ -43,9 +43,7 @@ spec:
securityContext: securityContext:
runAsUser: {{ netchecker_agent_user | default('0') }} runAsUser: {{ netchecker_agent_user | default('0') }}
runAsGroup: {{ netchecker_agent_group | default('0') }} runAsGroup: {{ netchecker_agent_group | default('0') }}
{% if rbac_enabled %}
serviceAccountName: netchecker-agent serviceAccountName: netchecker-agent
{% endif %}
updateStrategy: updateStrategy:
rollingUpdate: rollingUpdate:
maxUnavailable: 100% maxUnavailable: 100%

2
roles/kubernetes-apps/ansible/templates/netchecker-agent-hostnet-ds.yml.j2
View File

@ -47,9 +47,7 @@ spec:
securityContext: securityContext:
runAsUser: {{ netchecker_agent_user | default('0') }} runAsUser: {{ netchecker_agent_user | default('0') }}
runAsGroup: {{ netchecker_agent_group | default('0') }} runAsGroup: {{ netchecker_agent_group | default('0') }}
{% if rbac_enabled %}
serviceAccountName: netchecker-agent serviceAccountName: netchecker-agent
{% endif %}
updateStrategy: updateStrategy:
rollingUpdate: rollingUpdate:
maxUnavailable: 100% maxUnavailable: 100%

2
roles/kubernetes-apps/registry/templates/registry-proxy-ds.yml.j2
View File

@ -21,9 +21,7 @@ spec:
kubernetes.io/cluster-service: "true" kubernetes.io/cluster-service: "true"
version: v{{ registry_proxy_image_tag }} version: v{{ registry_proxy_image_tag }}
spec: spec:
{% if rbac_enabled %}
serviceAccountName: registry-proxy serviceAccountName: registry-proxy
{% endif %}
containers: containers:
- name: registry-proxy - name: registry-proxy
image: {{ registry_proxy_image_repo }}:{{ registry_proxy_image_tag }} image: {{ registry_proxy_image_repo }}:{{ registry_proxy_image_tag }}

2
roles/kubernetes-apps/registry/templates/registry-rs.yml.j2
View File

@ -22,9 +22,7 @@ spec:
version: v{{ registry_image_tag }} version: v{{ registry_image_tag }}
kubernetes.io/cluster-service: "true" kubernetes.io/cluster-service: "true"
spec: spec:
{% if rbac_enabled %}
serviceAccountName: registry serviceAccountName: registry
{% endif %}
containers: containers:
- name: registry - name: registry
image: {{ registry_image_repo }}:{{ registry_image_tag }} image: {{ registry_image_repo }}:{{ registry_image_tag }}