Tin Lam 628fd3007d RBAC: Consolidate serviceaccounts and restrict rbac ... Currently, services have two serviceaccounts: one specified in the chart that cannot read anything, and one injected via helm-toolkit that can read everything. This patch set refactors the logic to: - cleanup the roles and their binding automatically when the helm chart is deleted; - remove the need to separately mount a serviceaccount with secret; - better handling of namespaces resource restriction. Co-Authored-By: portdirect <pete@port.direct> Change-Id: I47d41e0cad9b5b002f59fc9652bad2cc025538dc		2017-12-19 20:22:57 -05:00
..
bin	Chart Runner: Add NFS provisoner and Docker Registry	2017-11-01 11:40:09 -05:00
etc	Chart Runner: Add NFS provisoner and Docker Registry	2017-11-01 11:40:09 -05:00
configmap-bin.yaml	Chart Runner: Add NFS provisoner and Docker Registry	2017-11-01 11:40:09 -05:00
configmap-etc.yaml	Image local repo jobs and multiple namespace support	2017-11-02 16:23:32 -05:00
daemonset-registry-proxy.yaml	RBAC: Consolidate serviceaccounts and restrict rbac	2017-12-19 20:22:57 -05:00
deployment-registry.yaml	RBAC: Consolidate serviceaccounts and restrict rbac	2017-12-19 20:22:57 -05:00
job-bootstrap.yaml	RBAC: Consolidate serviceaccounts and restrict rbac	2017-12-19 20:22:57 -05:00
pvc-images.yaml	Chart Runner: Add NFS provisoner and Docker Registry	2017-11-01 11:40:09 -05:00
service-registry.yaml	Chart Runner: Add NFS provisoner and Docker Registry	2017-11-01 11:40:09 -05:00