Skip to content

S
system-charts
Commit ffc59405 by Murali Paluru Committed by Alena Prokharchyk
Options

remove TODOs

parent 0bc68db8
Showing with 0 additions and 10 deletions
charts/rancher-cis-benchmark/v0.0.1/templates/rbac.yaml
...@@ -6,8 +6,6 @@ metadata: ...@@ -6,8 +6,6 @@ metadata:
helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }} helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }} app.kubernetes.io/managed-by: {{ .Release.Service }}
# TODO: make the sa name configurable
# name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount
name: s-sa-{{ .Release.Name }} name: s-sa-{{ .Release.Name }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1beta1 apiVersion: rbac.authorization.k8s.io/v1beta1
...@@ -18,8 +16,6 @@ metadata: ...@@ -18,8 +16,6 @@ metadata:
helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }} helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }} app.kubernetes.io/managed-by: {{ .Release.Service }}
# TODO: make the sa name configurable
# name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount
name: s-sa-{{ .Release.Name }} name: s-sa-{{ .Release.Name }}
rules: rules:
- apiGroups: - apiGroups:
...@@ -37,18 +33,12 @@ metadata: ...@@ -37,18 +33,12 @@ metadata:
helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }} helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }} app.kubernetes.io/managed-by: {{ .Release.Service }}
# TODO: make the sa name configurable
# name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount
name: s-sa-{{ .Release.Name }} name: s-sa-{{ .Release.Name }}
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
# TODO: make the sa name configurable
# name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount
name: s-sa-{{ .Release.Name }} name: s-sa-{{ .Release.Name }}
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
# TODO: make the sa name configurable
# name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount
name: s-sa-{{ .Release.Name }} name: s-sa-{{ .Release.Name }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment