openstack/openstack-helm-infra
Code Issues Proposed changes
17b13c42d7
openstack-helm-infra/prometheus-kube-state-metrics/templates
History
Tin Lam 628fd3007d RBAC: Consolidate serviceaccounts and restrict rbac 
Currently, services have two serviceaccounts: one specified in the
chart that cannot read anything, and one injected via helm-toolkit
that can read everything. This patch set refactors the logic to:

- cleanup the roles and their binding automatically when the helm
  chart is deleted;
- remove the need to separately mount a serviceaccount  with secret;
- better handling of namespaces resource restriction.

Co-Authored-By: portdirect <pete@port.direct>

Change-Id: I47d41e0cad9b5b002f59fc9652bad2cc025538dc
2017-12-19 20:22:57 -05:00
..
clusterrole.yaml Include prometheus- prefix for select monitoring charts 2017-12-17 23:22:50 -05:00
clusterrolebinding.yaml RBAC: Consolidate serviceaccounts and restrict rbac 2017-12-19 20:22:57 -05:00
configmap-bin.yaml Include prometheus- prefix for select monitoring charts 2017-12-17 23:22:50 -05:00
deployment.yaml RBAC: Consolidate serviceaccounts and restrict rbac 2017-12-19 20:22:57 -05:00
job-image-repo-sync.yaml RBAC: Consolidate serviceaccounts and restrict rbac 2017-12-19 20:22:57 -05:00
service-controller-manager.yaml Include prometheus- prefix for select monitoring charts 2017-12-17 23:22:50 -05:00
service-kube-metrics.yaml Include prometheus- prefix for select monitoring charts 2017-12-17 23:22:50 -05:00
service-scheduler.yaml Include prometheus- prefix for select monitoring charts 2017-12-17 23:22:50 -05:00