KohlsTechnology / eunomia

A GitOps Operator for Kubernetes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add PodSecurityPolicy To Helm Deployment

seanmalloy opened this issue · comments

Is your feature request related to a problem? Please describe.

I'm deploying eunomia using the helm chart to a k8s cluster that is using PodSecurityPolicies. After deploying eunomia with helm I need to edit the clusterrole and also create a PodSecurityPolicy manually.

kubectl edit clusterrole eunomia-operator

Describe the solution you'd like

I'd like the helm chart to have an option to deploy a PSP and a clusterrole that allows using the PSP. This would be a true/false flag. The flag should default to false.

Describe alternatives you've considered

Creating the PSP by hand.

What version of eunomia are you using?

kubectl exec $EUNOMIA_POD curl localhost:8383/metrics Output
$ kubectl get -n eunomia-operator endpoints/eunomia-operator -o jsonpath='{.subsets[*].addresses[*].targetRef.name}' | xargs -I% kubectl exec -n eunomia-operator % -- curl -sS localhost:8383/metrics | grep eunomia_build_info
# HELP eunomia_build_info A metric with a constant '1' value labeled by version from which eunomia was built, and other useful build information.
# TYPE eunomia_build_info gauge
eunomia_build_info{branch="HEAD",builddate="20210118-22:19:11",gitsha1="338ae043d04d08defa35a26e305efc04e1fc33be",goversion="go1.15.5",operatorsdk="v0.17.1",version="v0.1.9"} 1

eunomia version: v0.1.9

Additional context