mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-20 19:10:34 +00:00
Remove create flags for crd, rbac, and serviceAccounts
These all default to true and there doesn't seem to be any reason a user would want to set any to false as Submariner woild not work without these resources. Removing them simplifies the charts. Signed-off-by: Tom Pantelis <tompantelis@gmail.com>
This commit is contained in:
committed by
Thomas Pantelis
parent
028400610b
commit
1bb89aba3f
+1
-11
@@ -40,37 +40,30 @@ cat yamls/Deploy_crds_submariner_io_submariners.yaml \
|
|||||||
yamls/Deploy_crds_submariner_io_brokers.yaml > submariner-operator/crds/crd.yaml
|
yamls/Deploy_crds_submariner_io_brokers.yaml > submariner-operator/crds/crd.yaml
|
||||||
|
|
||||||
# Generate the operator RBAC yaml for the operator chart
|
# Generate the operator RBAC yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${OPERATOR_RBAC_YAML}
|
|
||||||
add_service_acct_ns yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml
|
||||||
cat yamls/Config_rbac_submariner_operator_service_account.yaml \
|
cat yamls/Config_rbac_submariner_operator_service_account.yaml \
|
||||||
yamls/Config_rbac_submariner_operator_role.yaml \
|
yamls/Config_rbac_submariner_operator_role.yaml \
|
||||||
yamls/Config_rbac_submariner_operator_role_binding.yaml \
|
yamls/Config_rbac_submariner_operator_role_binding.yaml \
|
||||||
yamls/Config_rbac_submariner_operator_cluster_role.yaml \
|
yamls/Config_rbac_submariner_operator_cluster_role.yaml \
|
||||||
yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml > ${OPERATOR_RBAC_YAML}
|
yamls/Config_rbac_submariner_operator_cluster_role_binding.yaml > ${OPERATOR_RBAC_YAML}
|
||||||
echo '{{- end -}}' >> ${OPERATOR_RBAC_YAML}
|
|
||||||
|
|
||||||
# Generate the gateway RBAC yaml for the operator chart
|
# Generate the gateway RBAC yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${GATEWAY_RBAC_YAML}
|
|
||||||
add_service_acct_ns yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml
|
||||||
cat yamls/Config_rbac_submariner_gateway_service_account.yaml \
|
cat yamls/Config_rbac_submariner_gateway_service_account.yaml \
|
||||||
yamls/Config_rbac_submariner_gateway_role.yaml \
|
yamls/Config_rbac_submariner_gateway_role.yaml \
|
||||||
yamls/Config_rbac_submariner_gateway_role_binding.yaml \
|
yamls/Config_rbac_submariner_gateway_role_binding.yaml \
|
||||||
yamls/Config_rbac_submariner_gateway_cluster_role.yaml \
|
yamls/Config_rbac_submariner_gateway_cluster_role.yaml \
|
||||||
yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml > ${GATEWAY_RBAC_YAML}
|
yamls/Config_rbac_submariner_gateway_cluster_role_binding.yaml > ${GATEWAY_RBAC_YAML}
|
||||||
echo '{{- end -}}' >> ${GATEWAY_RBAC_YAML}
|
|
||||||
|
|
||||||
# Generate the routeagent RBAC yaml for the operator chart
|
# Generate the routeagent RBAC yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${ROUTE_AGENT_RBAC_YAML}
|
|
||||||
add_service_acct_ns yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml
|
||||||
cat yamls/Config_rbac_submariner_route_agent_service_account.yaml \
|
cat yamls/Config_rbac_submariner_route_agent_service_account.yaml \
|
||||||
yamls/Config_rbac_submariner_route_agent_role.yaml \
|
yamls/Config_rbac_submariner_route_agent_role.yaml \
|
||||||
yamls/Config_rbac_submariner_route_agent_role_binding.yaml \
|
yamls/Config_rbac_submariner_route_agent_role_binding.yaml \
|
||||||
yamls/Config_rbac_submariner_route_agent_cluster_role.yaml \
|
yamls/Config_rbac_submariner_route_agent_cluster_role.yaml \
|
||||||
yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml > ${ROUTE_AGENT_RBAC_YAML}
|
yamls/Config_rbac_submariner_route_agent_cluster_role_binding.yaml > ${ROUTE_AGENT_RBAC_YAML}
|
||||||
echo '{{- end -}}' >> ${ROUTE_AGENT_RBAC_YAML}
|
|
||||||
|
|
||||||
# Generate the globalnet RBAC yaml for the operator chart
|
# Generate the globalnet RBAC yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${GLOBALNET_RBAC_YAML}
|
|
||||||
echo '{{- if .Values.broker.globalnet }}' > ${GLOBALNET_RBAC_YAML}
|
echo '{{- if .Values.broker.globalnet }}' > ${GLOBALNET_RBAC_YAML}
|
||||||
add_service_acct_ns yamls/Config_rbac_submariner_globalnet_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_submariner_globalnet_cluster_role_binding.yaml
|
||||||
cat yamls/Config_rbac_submariner_globalnet_service_account.yaml \
|
cat yamls/Config_rbac_submariner_globalnet_service_account.yaml \
|
||||||
@@ -81,7 +74,6 @@ cat yamls/Config_rbac_submariner_globalnet_service_account.yaml \
|
|||||||
echo '{{- end -}}' >> ${GLOBALNET_RBAC_YAML}
|
echo '{{- end -}}' >> ${GLOBALNET_RBAC_YAML}
|
||||||
|
|
||||||
# Generate the service discovery RBAC yaml for the operator chart
|
# Generate the service discovery RBAC yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${SERVICE_DISC_RBAC_YAML}
|
|
||||||
echo '{{- if .Values.submariner.serviceDiscovery }}' > ${SERVICE_DISC_RBAC_YAML}
|
echo '{{- if .Values.submariner.serviceDiscovery }}' > ${SERVICE_DISC_RBAC_YAML}
|
||||||
add_service_acct_ns yamls/Config_rbac_lighthouse_agent_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_lighthouse_agent_cluster_role_binding.yaml
|
||||||
add_service_acct_ns yamls/Config_rbac_lighthouse_coredns_cluster_role_binding.yaml
|
add_service_acct_ns yamls/Config_rbac_lighthouse_coredns_cluster_role_binding.yaml
|
||||||
@@ -94,7 +86,5 @@ cat yamls/Config_rbac_lighthouse_agent_service_account.yaml \
|
|||||||
echo '{{- end -}}' >> ${SERVICE_DISC_RBAC_YAML}
|
echo '{{- end -}}' >> ${SERVICE_DISC_RBAC_YAML}
|
||||||
|
|
||||||
# Generate the openshift monitoring rbac yaml for the operator chart
|
# Generate the openshift monitoring rbac yaml for the operator chart
|
||||||
echo '{{- if .Values.rbac.create -}}' > ${OPENSHIFT_MONITORING_YAML}
|
|
||||||
cat yamls/Config_openshift_rbac_submariner_metrics_reader_role.yaml \
|
cat yamls/Config_openshift_rbac_submariner_metrics_reader_role.yaml \
|
||||||
yamls/Config_openshift_rbac_submariner_metrics_reader_role_binding.yaml >> ${OPENSHIFT_MONITORING_YAML}
|
yamls/Config_openshift_rbac_submariner_metrics_reader_role_binding.yaml > ${OPENSHIFT_MONITORING_YAML}
|
||||||
echo '{{- end -}}' >> ${OPENSHIFT_MONITORING_YAML}
|
|
||||||
|
|||||||
@@ -13,12 +13,3 @@ Submariner Kubernetes Broker
|
|||||||
## Source Code
|
## Source Code
|
||||||
|
|
||||||
* <https://submariner-io.github.io/submariner-charts/charts>
|
* <https://submariner-io.github.io/submariner-charts/charts>
|
||||||
|
|
||||||
## Values
|
|
||||||
|
|
||||||
| Key | Type | Default | Description |
|
|
||||||
|-----|------|---------|-------------|
|
|
||||||
| crd.create | bool | `true` | |
|
|
||||||
| rbac.create | bool | `true` | |
|
|
||||||
| serviceAccounts.client.create | bool | `true` | |
|
|
||||||
| serviceAccounts.client.name | string | `""` | |
|
|
||||||
|
|||||||
@@ -35,9 +35,5 @@ Create chart name and version as used by the chart label.
|
|||||||
Create the name of the submariner-client service account to use
|
Create the name of the submariner-client service account to use
|
||||||
*/}}
|
*/}}
|
||||||
{{- define "submariner-k8s-broker.clientServiceAccountName" -}}
|
{{- define "submariner-k8s-broker.clientServiceAccountName" -}}
|
||||||
{{- if .Values.serviceAccounts.client.create -}}
|
{{- printf "%s-client" (include "submariner-k8s-broker.fullname" .)}}
|
||||||
{{ default (printf "%s-client" (include "submariner-k8s-broker.fullname" .)) .Values.serviceAccounts.client.name }}
|
|
||||||
{{- else -}}
|
|
||||||
{{ default "default" .Values.serviceAccounts.client.name }}
|
|
||||||
{{- end -}}
|
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
@@ -1,4 +1,3 @@
|
|||||||
{{- if .Values.rbac.create -}}
|
|
||||||
{{ include "broker-role" $ }}
|
{{ include "broker-role" $ }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
@@ -13,4 +12,3 @@ subjects:
|
|||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
||||||
namespace: {{ .Release.Namespace }}
|
namespace: {{ .Release.Namespace }}
|
||||||
{{- end -}}
|
|
||||||
|
|||||||
@@ -1,4 +1,3 @@
|
|||||||
{{- if .Values.serviceAccounts.client.create }}
|
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ServiceAccount
|
kind: ServiceAccount
|
||||||
metadata:
|
metadata:
|
||||||
@@ -16,4 +15,3 @@ metadata:
|
|||||||
annotations:
|
annotations:
|
||||||
kubernetes.io/service-account.name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
kubernetes.io/service-account.name: {{ template "submariner-k8s-broker.clientServiceAccountName" . }}
|
||||||
type: kubernetes.io/service-account-token
|
type: kubernetes.io/service-account-token
|
||||||
{{- end }}
|
|
||||||
@@ -1,9 +1 @@
|
|||||||
---
|
---
|
||||||
rbac:
|
|
||||||
create: true
|
|
||||||
crd:
|
|
||||||
create: true
|
|
||||||
serviceAccounts:
|
|
||||||
client:
|
|
||||||
create: true
|
|
||||||
name: ""
|
|
||||||
|
|||||||
@@ -38,19 +38,6 @@ Submariner enables direct networking between Pods and Services in different Kube
|
|||||||
| operator.image.tag | string | `"0.14.0"` | |
|
| operator.image.tag | string | `"0.14.0"` | |
|
||||||
| operator.resources | object | `{}` | |
|
| operator.resources | object | `{}` | |
|
||||||
| operator.tolerations | list | `[]` | |
|
| operator.tolerations | list | `[]` | |
|
||||||
| rbac.create | bool | `true` | |
|
|
||||||
| serviceAccounts.gateway.create | bool | `true` | |
|
|
||||||
| serviceAccounts.gateway.name | string | `""` | |
|
|
||||||
| serviceAccounts.globalnet.create | bool | `true` | |
|
|
||||||
| serviceAccounts.globalnet.name | string | `""` | |
|
|
||||||
| serviceAccounts.lighthouseAgent.create | bool | `true` | |
|
|
||||||
| serviceAccounts.lighthouseAgent.name | string | `""` | |
|
|
||||||
| serviceAccounts.lighthouseCoreDns.create | bool | `true` | |
|
|
||||||
| serviceAccounts.lighthouseCoreDns.name | string | `""` | |
|
|
||||||
| serviceAccounts.operator.create | bool | `true` | |
|
|
||||||
| serviceAccounts.operator.name | string | `""` | |
|
|
||||||
| serviceAccounts.routeAgent.create | bool | `true` | |
|
|
||||||
| serviceAccounts.routeAgent.name | string | `""` | |
|
|
||||||
| submariner.cableDriver | string | `"libreswan"` | |
|
| submariner.cableDriver | string | `"libreswan"` | |
|
||||||
| submariner.clusterCidr | string | `""` | |
|
| submariner.clusterCidr | string | `""` | |
|
||||||
| submariner.clusterId | string | `""` | |
|
| submariner.clusterId | string | `""` | |
|
||||||
|
|||||||
@@ -25,8 +25,6 @@ broker:
|
|||||||
insecure: false
|
insecure: false
|
||||||
ca: ""
|
ca: ""
|
||||||
globalnet: false
|
globalnet: false
|
||||||
rbac:
|
|
||||||
create: true
|
|
||||||
images: {}
|
images: {}
|
||||||
ipsec:
|
ipsec:
|
||||||
psk: ""
|
psk: ""
|
||||||
|
|||||||
Reference in New Issue
Block a user