Add PodSecurityPolicy To Helm Deployment
seanmalloy opened this issue · comments
Sean Malloy commented
Is your feature request related to a problem? Please describe.
I'm deploying eunomia using the helm chart to a k8s cluster that is using PodSecurityPolicies. After deploying eunomia with helm I need to edit the clusterrole and also create a PodSecurityPolicy manually.
kubectl edit clusterrole eunomia-operator
Describe the solution you'd like
I'd like the helm chart to have an option to deploy a PSP and a clusterrole that allows using the PSP. This would be a true/false flag. The flag should default to false.
Describe alternatives you've considered
Creating the PSP by hand.
What version of eunomia are you using?
kubectl exec $EUNOMIA_POD curl localhost:8383/metrics
Output
$ kubectl get -n eunomia-operator endpoints/eunomia-operator -o jsonpath='{.subsets[*].addresses[*].targetRef.name}' | xargs -I% kubectl exec -n eunomia-operator % -- curl -sS localhost:8383/metrics | grep eunomia_build_info # HELP eunomia_build_info A metric with a constant '1' value labeled by version from which eunomia was built, and other useful build information. # TYPE eunomia_build_info gauge eunomia_build_info{branch="HEAD",builddate="20210118-22:19:11",gitsha1="338ae043d04d08defa35a26e305efc04e1fc33be",goversion="go1.15.5",operatorsdk="v0.17.1",version="v0.1.9"} 1
eunomia version: v0.1.9
Additional context