public_git
/
ckotzbauer_helm-charts
mirror of https://github.com/ckotzbauer/helm-charts.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chore: Update appVersion and psp as privileged (#26)

This commit is contained in:
Pere Alcoberro 2020-09-16 17:32:06 +02:00 committed by GitHub
parent b4144f449c
commit 904742182f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 26 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
charts/cadvisor/Chart.yaml
View File

@ -1,8 +1,8 @@
apiVersion: v1 apiVersion: v1
description: A chart for a Cadvisor deployment description: A chart for a Cadvisor deployment
name: cadvisor name: cadvisor
version: 1.1.4 version: 1.2.0
appVersion: 0.36.0 appVersion: 0.37.0
home: https://github.com/google/cadvisor home: https://github.com/google/cadvisor
sources: sources:
- https://github.com/google/cadvisor - https://github.com/google/cadvisor

37
charts/cadvisor/README.md
View File

@ -41,24 +41,25 @@ The command removes all the Kubernetes components associated with the chart and
The following table lists the configurable parameters of the Prometheus MSTeams chart and their default values. The following table lists the configurable parameters of the Prometheus MSTeams chart and their default values.
| Parameter | Description | Default | | Parameter | Description | Default |
| -------------------------- | ------------------------------------------------ | --------------------- | | ------------------------------ | ------------------------------------------------ | --------------------- |
| `image.repository` | container image repository | `k8s.gcr.io/cadvisor` | | `image.repository` | container image repository | `k8s.gcr.io/cadvisor` |
| `image.tag` | container image tag | `v0.36.0` | | `image.tag` | container image tag | `v0.37.0` |
| `image.pullPolicy` | container image pull policy | `IfNotPresent` | | `image.pullPolicy` | container image pull policy | `IfNotPresent` |
| `image.pullSecrets` | container image pull secrets | `[]` | | `image.pullSecrets` | container image pull secrets | `[]` |
| `nodeSelector` | node labels for pod assignment | `{}` | | `nodeSelector` | node labels for pod assignment | `{}` |
| `tolerations` | node tolerations for pod assignment | `[]` | | `tolerations` | node tolerations for pod assignment | `[]` |
| `affinity` | node affinity for pod assignment | `{}` | | `affinity` | node affinity for pod assignment | `{}` |
| `container.port` | the container and service port to use | 8080 | | `container.port` | the container and service port to use | 8080 |
| `container.additionalArgs` | additional container arguments | see values.yaml | | `container.additionalArgs` | additional container arguments | see values.yaml |
| `container.hostPaths` | hostPaths to mount in the container | see values.yaml | | `container.hostPaths` | hostPaths to mount in the container | see values.yaml |
| `resources` | pod resource requests & limits | `{}` | | `resources` | pod resource requests & limits | `{}` |
| `serviceAccount.create` | create a own serviceAccount for the pod | `true` | | `serviceAccount.create` | create a own serviceAccount for the pod | `true` |
| `serviceAccount.name` | name of the serviceAccount to create | `""` | | `serviceAccount.name` | name of the serviceAccount to create | `""` |
| `podAnnotations` | annotations for the daemonset pods | `{}` | | `podAnnotations` | annotations for the daemonset pods | `{}` |
| `podSecurityPolicy.create` | create a own PodSecurityPolicy for the pod | `false` | | `podSecurityPolicy.create` | create a own PodSecurityPolicy for the pod | `false` |
| `metrics.enabled` | create ServiceMonitor CR for Prometheus operator | `false` | | `podSecurityPolicy.privileged` | create the PodSecurityPolicy as privileged | `false` |
| `metrics.enabled` | create ServiceMonitor CR for Prometheus operator | `false` |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example, Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,

3
charts/cadvisor/templates/psp.yaml
View File

@ -14,6 +14,9 @@ spec:
rule: RunAsAny rule: RunAsAny
volumes: volumes:
- '*' - '*'
{{ if .Values.podSecurityPolicy.privileged }}
privileged: true
{{- end }}
allowedHostPaths: allowedHostPaths:
{{- range .Values.container.hostPaths }} {{- range .Values.container.hostPaths }}
- pathPrefix: {{ .path }} - pathPrefix: {{ .path }}

3
charts/cadvisor/values.yaml
View File

@ -1,6 +1,6 @@
image: image:
repository: k8s.gcr.io/cadvisor repository: k8s.gcr.io/cadvisor
tag: v0.36.0 tag: v0.37.0
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
## Reference to one or more secrets to be used when pulling images ## Reference to one or more secrets to be used when pulling images
@ -56,6 +56,7 @@ serviceAccount:
podSecurityPolicy: podSecurityPolicy:
create: false create: false
privileged: false
nodeSelector: {} nodeSelector: {}