-
Notifications
You must be signed in to change notification settings - Fork 470
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[kong] move ServiceAccount configuration #455
Conversation
8f991da
to
24d185c
Compare
@rainest what isthe specific use for CI that wasn't fulfilled by our existing triggers? Consider filing an |
It's just on PRs rather than branches, which makes sense for the vast majority of chart stuff. This one was a bit weird since I needed to make a new PR to test out my changes on top of stuff that originated from a fork. |
…#418) Add the feature to create a service account for the deployment and the migrations
…#418) fix trailing spaces.
…#418) Fix defaulting to previous definition.
Move the ServiceAccount configuration from under ingressController to under deployment. Always create the ServiceAccount by default, even if no permissions are assigned and it is not used by other resources in the chart. Add warnings indicating that configuration has moved if the ingressController.serviceAccount section set any non-default (empty) values. Mount the ServiceAccount token if the ServiceAccount exists. Disabling the ServiceAccount entirely disables mounting the default ServiceAccount token.
24d185c
to
75c5014
Compare
Ignore the prior conversation, this is a real PR and should be reviewed now. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No blockers just nitpicks 👍
Co-authored-by: Shane Utt <shaneutt@linux.com>
Allow creation and configuration of ServiceAccounts independent of the controller. By default, always create a ServiceAccount, changing it from a default conditional (if controller or PSP in use) on to just default on. Fix #418
Originally a user PR, but didn't hear back after the request to reopen in #418 (comment). Opening my own since I'd like this to go in before the next release, which is imminent.