alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 9 Actions 2 Activity

Merge pull request 'Automated Manifest Update' (#6326) from auto/update-manifests into manifests

Browse Source 
Reviewed-on: #6326
This commit was merged in pull request #6326.
This commit is contained in:
Alex Lebens
2026-04-27 21:17:39 +00:00
parent c6c81584e8 e3f54b0419
commit 7c6d0504e3
3 changed files with 77 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/PodSecurityPolicy-democratic-csi-synology-iscsi-psp.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: democratic-csi-synology-iscsi-psp
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
spec:
privileged: true
allowPrivilegeEscalation: true
requiredDropCapabilities:
- NET_RAW
allowedCapabilities:
- SYS_ADMIN
hostNetwork: false
hostIPC: false
hostPID: true
runAsUser:
rule: RunAsAny
seLinux:
rule: RunAsAny
fsGroup:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- configMap
- downwardAPI
- emptyDir
- secret
- projected
- hostPath

19
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/Role-democratic-csi-synology-iscsi-role.yaml Normal file
View File

@@ -0,0 +1,19 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: democratic-csi-synology-iscsi-role
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
namespace: democratic-csi-synology-iscsi
rules:
- apiGroups:
- policy
resources:
- podsecuritypolicies
verbs:
- use
resourceNames:
- democratic-csi-synology-iscsi-psp

24
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/RoleBinding-democratic-csi-synology-iscsi-psp-binding.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: democratic-csi-synology-iscsi-psp-binding
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
namespace: democratic-csi-synology-iscsi
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: democratic-csi-synology-iscsi-psp-role
subjects:
- kind: ServiceAccount
name: democratic-csi-synology-iscsi-controller-sa
namespace: democratic-csi-synology-iscsi
- kind: ServiceAccount
name: democratic-csi-synology-iscsi-node-sa
namespace: democratic-csi-synology-iscsi
- kind: ServiceAccount
name: default
namespace: democratic-csi-synology-iscsi