psp, roles and rbs for PodSecurityPolicy when podsecuritypolicy_enabled is true

2026-05-24 00:57:51 -02:30 · 2018-08-22 18:16:13 +02:00
parent 4eea7f7eb9
commit 80cfeea957
48 changed files with 851 additions and 44 deletions
--- a/roles/kubernetes-apps/registry/templates/registry-rs.yml.j2
+++ b/roles/kubernetes-apps/registry/templates/registry-rs.yml.j2
@@ -22,6 +22,9 @@ spec:
        version: v{{ registry_image_tag }}
        kubernetes.io/cluster-service: "true"
    spec:
+{% if rbac_enabled %}
+      serviceAccountName: registry
+{% endif %}
      containers:
        - name: registry
          image: {{ registry_image_repo }}:{{ registry_image_tag }}