Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[kong] move ServiceAccount configuration #455

Merged
merged 8 commits into from
Sep 30, 2021
Merged

Conversation

rainest
Copy link
Contributor

@rainest rainest commented Sep 2, 2021

Allow creation and configuration of ServiceAccounts independent of the controller. By default, always create a ServiceAccount, changing it from a default conditional (if controller or PSP in use) on to just default on. Fix #418

Originally a user PR, but didn't hear back after the request to reopen in #418 (comment). Opening my own since I'd like this to go in before the next release, which is imminent.

@rainest rainest requested a review from a team as a code owner September 2, 2021 22:42
@rainest rainest force-pushed the fork/ludovic-pourrat-next branch 4 times, most recently from 8f991da to 24d185c Compare September 2, 2021 22:59
@mflendrich mflendrich removed the request for review from a team September 3, 2021 19:48
@mflendrich
Copy link
Member

@rainest what isthe specific use for CI that wasn't fulfilled by our existing triggers? Consider filing an area/ci issue if it makes sense to fix going forward

@rainest
Copy link
Contributor Author

rainest commented Sep 3, 2021

It's just on PRs rather than branches, which makes sense for the vast majority of chart stuff. This one was a bit weird since I needed to make a new PR to test out my changes on top of stuff that originated from a fork.

ludovic-pourrat and others added 7 commits September 30, 2021 15:50
…#418)

Add the feature to create a service account for the deployment and the migrations
Move the ServiceAccount configuration from under ingressController to
under deployment. Always create the ServiceAccount by default, even if
no permissions are assigned and it is not used by other resources in the
chart.

Add warnings indicating that configuration has moved if the
ingressController.serviceAccount section set any non-default (empty)
values.

Mount the ServiceAccount token if the ServiceAccount exists. Disabling
the ServiceAccount entirely disables mounting the default ServiceAccount
token.
@rainest rainest requested a review from a team September 30, 2021 22:52
@rainest rainest changed the title [tmp] serviceaccount fun [kong] move ServiceAccount configuration Sep 30, 2021
@rainest
Copy link
Contributor Author

rainest commented Sep 30, 2021

Ignore the prior conversation, this is a real PR and should be reviewed now.

Copy link
Member

@shaneutt shaneutt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No blockers just nitpicks 👍

charts/kong/README.md Show resolved Hide resolved
charts/kong/templates/_helpers.tpl Outdated Show resolved Hide resolved
Co-authored-by: Shane Utt <shaneutt@linux.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants