update kubelet-serving-cert-approver

This commit is contained in:
2024-03-13 05:54:53 -06:00
parent 1fe5c07c36
commit 8fb910383d
8 changed files with 29 additions and 35 deletions

View File

@@ -1,6 +1,6 @@
apiVersion: v2 apiVersion: v2
name: kubelet-serving-cert-approver name: kubelet-serving-cert-approver
version: 0.0.3 version: 0.0.4
description: Kubelet Serving TLS Certificate Signing Request Approver description: Kubelet Serving TLS Certificate Signing Request Approver
keywords: keywords:
- kubernetes - kubernetes

View File

@@ -1,15 +1,14 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding kind: ClusterRoleBinding
metadata: metadata:
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole

View File

@@ -4,12 +4,11 @@ metadata:
name: "certificates:{{ .Release.Name }}" name: "certificates:{{ .Release.Name }}"
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm
rules: rules:
- apiGroups: - apiGroups:
- certificates.k8s.io - certificates.k8s.io
@@ -47,12 +46,11 @@ metadata:
name: "events:{{ .Release.Name }}" name: "events:{{ .Release.Name }}"
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approverv
app.kubernetes.io/managed-by: helm
rules: rules:
- apiGroups: - apiGroups:
- "" - ""

View File

@@ -1,15 +1,14 @@
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm
spec: spec:
revisionHistoryLimit: 3 revisionHistoryLimit: 3
replicas: {{ .Values.deployment.replicas }} replicas: {{ .Values.deployment.replicas }}
@@ -17,13 +16,14 @@ spec:
type: {{ .Values.deployment.strategy }} type: {{ .Values.deployment.strategy }}
selector: selector:
matchLabels: matchLabels:
app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/name: {{ .Release.Name }}
template: template:
metadata: metadata:
labels: labels:
app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/name: {{ .Release.Name }}
spec: spec:
affinity: affinity:
nodeAffinity: nodeAffinity:
@@ -78,7 +78,7 @@ spec:
runAsUser: 65534 runAsUser: 65534
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
serviceAccountName: {{ .Release.Name }} serviceAccountName: kubelet-serving-cert-approver
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
key: node-role.kubernetes.io/master key: node-role.kubernetes.io/master

View File

@@ -1,10 +1,10 @@
apiVersion: v1 apiVersion: v1
kind: Namespace kind: Namespace
metadata: metadata:
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
labels: labels:
app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/name: {{ .Release.Name }}
pod-security.kubernetes.io/audit: restricted pod-security.kubernetes.io/audit: restricted
pod-security.kubernetes.io/enforce: restricted pod-security.kubernetes.io/enforce: restricted
pod-security.kubernetes.io/warn: restricted pod-security.kubernetes.io/warn: restricted

View File

@@ -4,17 +4,16 @@ metadata:
name: "events:{{ .Release.Name }}" name: "events:{{ .Release.Name }}"
namespace: default namespace: default
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
kind: ClusterRole kind: ClusterRole
name: "events:{{ .Release.Name }}" name: "events:{{ .Release.Name }}"
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
namespace: {{ .Release.Name }} namespace: {{ .Release.Name }}

View File

@@ -1,12 +1,11 @@
apiVersion: v1 apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm

View File

@@ -1,15 +1,14 @@
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
metadata: metadata:
name: {{ .Release.Name }} name: kubelet-serving-cert-approver
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Release.Name }} app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
app.kubernetes.io/component: server app.kubernetes.io/component: server
app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: kubelet-serving-cert-approver
app.kubernetes.io/managed-by: helm
spec: spec:
ports: ports:
- name: metrics - name: metrics
@@ -17,5 +16,5 @@ spec:
protocol: TCP protocol: TCP
targetPort: metrics targetPort: metrics
selector: selector:
app.kubernetes.io/name: kubelet-serving-cert-approver
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/name: {{ .Release.Name }}