psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true

2026-03-09 11:47:47 +03:00 · 2018-08-22 18:16:13 +02:00
parent 4eea7f7eb9
commit 80cfeea957
48 changed files with 851 additions and 44 deletions
--- a/roles/kubernetes-apps/registry/templates/registry-proxy-ds.yml.j2
+++ b/roles/kubernetes-apps/registry/templates/registry-proxy-ds.yml.j2
@@ -21,6 +21,9 @@ spec:
        kubernetes.io/cluster-service: "true"
        version: v{{ registry_proxy_image_tag }}
    spec:
+{% if rbac_enabled %}
+      serviceAccountName: registry-proxy
+{% endif %}
      containers:
        - name: registry-proxy
          image: {{ registry_proxy_image_repo }}:{{ registry_proxy_image_tag }}