mirror of https://git.rancher.io/charts
[rancher-pushprox] Replace implicit capabilities check with .Values.global.cattle.psp.enabled and bump major version
parent
71f20e3e17
commit
9c264011a5
|
@ -6,7 +6,7 @@ metadata:
|
||||||
name: {{ template "pushProxy.client.name" . }}
|
name: {{ template "pushProxy.client.name" . }}
|
||||||
labels: {{ include "pushProxy.client.labels" . | nindent 4 }}
|
labels: {{ include "pushProxy.client.labels" . | nindent 4 }}
|
||||||
rules:
|
rules:
|
||||||
{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicies" }}
|
{{- if .Values.global.cattle.psp.enabled }}
|
||||||
- apiGroups: ['policy']
|
- apiGroups: ['policy']
|
||||||
resources: ['podsecuritypolicies']
|
resources: ['podsecuritypolicies']
|
||||||
verbs: ['use']
|
verbs: ['use']
|
||||||
|
@ -42,7 +42,7 @@ metadata:
|
||||||
namespace: {{ include "pushprox.namespace" . }}
|
namespace: {{ include "pushprox.namespace" . }}
|
||||||
labels: {{ include "pushProxy.client.labels" . | nindent 4 }}
|
labels: {{ include "pushProxy.client.labels" . | nindent 4 }}
|
||||||
---
|
---
|
||||||
{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicies" }}
|
{{- if .Values.global.cattle.psp.enabled }}
|
||||||
apiVersion: policy/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
|
|
|
@ -6,13 +6,13 @@ metadata:
|
||||||
name: {{ template "pushProxy.proxy.name" . }}
|
name: {{ template "pushProxy.proxy.name" . }}
|
||||||
labels: {{ include "pushProxy.proxy.labels" . | nindent 4 }}
|
labels: {{ include "pushProxy.proxy.labels" . | nindent 4 }}
|
||||||
rules:
|
rules:
|
||||||
{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicies" }}
|
{{- if .Values.global.cattle.psp.enabled }}
|
||||||
- apiGroups: ['policy']
|
- apiGroups: ['policy']
|
||||||
resources: ['podsecuritypolicies']
|
resources: ['podsecuritypolicies']
|
||||||
verbs: ['use']
|
verbs: ['use']
|
||||||
resourceNames:
|
resourceNames:
|
||||||
- {{ template "pushProxy.proxy.name" . }}
|
- {{ template "pushProxy.proxy.name" . }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
|
@ -35,7 +35,7 @@ metadata:
|
||||||
namespace: {{ include "pushprox.namespace" . }}
|
namespace: {{ include "pushprox.namespace" . }}
|
||||||
labels: {{ include "pushProxy.proxy.labels" . | nindent 4 }}
|
labels: {{ include "pushProxy.proxy.labels" . | nindent 4 }}
|
||||||
---
|
---
|
||||||
{{- if .Capabilities.APIVersions.Has "policy/v1beta1/PodSecurityPolicies" }}
|
{{- if .Values.global.cattle.psp.enabled }}
|
||||||
apiVersion: policy/v1beta1
|
apiVersion: policy/v1beta1
|
||||||
kind: PodSecurityPolicy
|
kind: PodSecurityPolicy
|
||||||
metadata:
|
metadata:
|
||||||
|
|
|
@ -9,6 +9,8 @@
|
||||||
|
|
||||||
global:
|
global:
|
||||||
cattle:
|
cattle:
|
||||||
|
psp:
|
||||||
|
enabled: false
|
||||||
systemDefaultRegistry: ""
|
systemDefaultRegistry: ""
|
||||||
seLinux:
|
seLinux:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
|
@ -1,3 +1,2 @@
|
||||||
url: local
|
url: local
|
||||||
version: 101.0.1
|
version: 102.0.0
|
||||||
doNotRelease: true
|
|
||||||
|
|
|
@ -66,6 +66,8 @@ rancher-monitoring-crd:
|
||||||
- 101.1.0+up40.1.2
|
- 101.1.0+up40.1.2
|
||||||
rancher-project-monitoring:
|
rancher-project-monitoring:
|
||||||
- 1.1.0+up0.2.0-rc1
|
- 1.1.0+up0.2.0-rc1
|
||||||
|
rancher-pushprox:
|
||||||
|
- 102.0.0
|
||||||
rancher-vsphere-cpi:
|
rancher-vsphere-cpi:
|
||||||
- 101.1.0+up1.4.1
|
- 101.1.0+up1.4.1
|
||||||
rancher-vsphere-csi:
|
rancher-vsphere-csi:
|
||||||
|
|
Loading…
Reference in New Issue