From 41f02d3c986b844e1e386e1cd83941c7c3dbbf06 Mon Sep 17 00:00:00 2001 From: Andrii Ostapenko Date: Tue, 7 Jul 2020 15:06:23 -0500 Subject: [PATCH] Fix service account name for ceph-mon keyring generator Fix issues introduced by https://review.opendev.org/#/c/735648 with extra 'ceph-' in service_account and security context not rendered for keyring generator containers. Change-Id: Ie53b3407dbd7345d37c92c60a04f3badf735f6a6 Signed-off-by: Andrii Ostapenko --- ceph-mon/templates/job-keyring.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ceph-mon/templates/job-keyring.yaml b/ceph-mon/templates/job-keyring.yaml index e27ff5300..1dd0190ea 100644 --- a/ceph-mon/templates/job-keyring.yaml +++ b/ceph-mon/templates/job-keyring.yaml @@ -18,7 +18,7 @@ limitations under the License. {{- $component := print $cephBootstrapKey "-keyring-generator" }} {{- $jobName := print "ceph-" $component }} -{{- $serviceAccountName := print "ceph-" $jobName }} +{{- $serviceAccountName := $jobName }} {{ tuple $envAll "job_keyring_generator" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }} --- apiVersion: rbac.authorization.k8s.io/v1 @@ -71,7 +71,7 @@ spec: - name: {{ $jobName }} {{ tuple $envAll "ceph_config_helper" | include "helm-toolkit.snippets.image" | indent 10 }} {{ tuple $envAll $envAll.Values.pod.resources.jobs.secret_provisioning | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} -{{ dict "envAll" $envAll "application" "ceph" "container" "$jobName" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }} +{{ dict "envAll" $envAll "application" "ceph" "container" $jobName | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }} env: - name: DEPLOYMENT_NAMESPACE valueFrom: