alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 7 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
Gitea
2026-04-27 21:16:05 +00:00
parent c6c81584e8
commit e3f54b0419
3 changed files with 77 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/PodSecurityPolicy-democratic-csi-synology-iscsi-psp.yaml Normal file
View File

@@ -0,0 +1,34 @@
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
name: democratic-csi-synology-iscsi-psp
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
spec:
privileged: true
allowPrivilegeEscalation: true
requiredDropCapabilities:
- NET_RAW
allowedCapabilities:
- SYS_ADMIN
hostNetwork: false
hostIPC: false
hostPID: true
runAsUser:
rule: RunAsAny
seLinux:
rule: RunAsAny
fsGroup:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- configMap
- downwardAPI
- emptyDir
- secret
- projected
- hostPath

19
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/Role-democratic-csi-synology-iscsi-role.yaml Normal file
View File

@@ -0,0 +1,19 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: democratic-csi-synology-iscsi-role
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
namespace: democratic-csi-synology-iscsi
rules:
- apiGroups:
- policy
resources:
- podsecuritypolicies
verbs:
- use
resourceNames:
- democratic-csi-synology-iscsi-psp

24
clusters/cl01tl/manifests/democratic-csi-synology-iscsi/RoleBinding-democratic-csi-synology-iscsi-psp-binding.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: democratic-csi-synology-iscsi-psp-binding
labels:
app.kubernetes.io/name: democratic-csi
helm.sh/chart: democratic-csi-0.15.1
app.kubernetes.io/instance: democratic-csi-synology-iscsi
app.kubernetes.io/managed-by: Helm
namespace: democratic-csi-synology-iscsi
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: democratic-csi-synology-iscsi-psp-role
subjects:
- kind: ServiceAccount
name: democratic-csi-synology-iscsi-controller-sa
namespace: democratic-csi-synology-iscsi
- kind: ServiceAccount
name: democratic-csi-synology-iscsi-node-sa
namespace: democratic-csi-synology-iscsi
- kind: ServiceAccount
name: default
namespace: democratic-csi-synology-iscsi