mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/kong] fix: 🔒 Move service-account token auto-mount to pod declaration (#22419)
* [bitnami/kong] fix: 🔒 Move service-account token auto-mount to pod declaration Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * fix: 🐛 Remove duplicate value Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> --------- Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com> Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
co-authored by
Bitnami Containers
Bitnami Containers
parent
31393705ce
commit
48e66298ad
@@ -45,4 +45,4 @@ maintainers:
|
||||
name: kong
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/kong
|
||||
version: 10.3.1
|
||||
version: 10.4.0
|
||||
|
||||
+17
-15
@@ -111,6 +111,7 @@ helm delete my-release
|
||||
| `podSecurityContext.fsGroup` | Set Kong pod's Security Context fsGroup | `1001` |
|
||||
| `updateStrategy.type` | Kong update strategy | `RollingUpdate` |
|
||||
| `updateStrategy.rollingUpdate` | Kong deployment rolling update configuration parameters | `{}` |
|
||||
| `automountServiceAccountToken` | Mount Service Account token in pod | `true` |
|
||||
| `hostAliases` | Add deployment host aliases | `[]` |
|
||||
| `topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
||||
| `priorityClassName` | Priority Class Name | `""` |
|
||||
@@ -263,27 +264,28 @@ helm delete my-release
|
||||
| `ingressController.lifecycleHooks` | Lifecycle hooks (Kong Ingress Controller container) | `{}` |
|
||||
| `ingressController.serviceAccount.create` | Enable the creation of a ServiceAccount for Keycloak pods | `true` |
|
||||
| `ingressController.serviceAccount.name` | Name of the created ServiceAccount (name generated using common.names.fullname template otherwise) | `""` |
|
||||
| `ingressController.serviceAccount.automountServiceAccountToken` | Auto-mount the service account token in the pod | `true` |
|
||||
| `ingressController.serviceAccount.automountServiceAccountToken` | Auto-mount the service account token in the pod | `false` |
|
||||
| `ingressController.serviceAccount.annotations` | Additional custom annotations for the ServiceAccount | `{}` |
|
||||
| `ingressController.rbac.create` | Create the necessary RBAC resources for the Ingress Controller to work | `true` |
|
||||
| `ingressController.rbac.rules` | Custom RBAC rules | `[]` |
|
||||
|
||||
### Kong Migration job Parameters
|
||||
|
||||
| Name | Description | Value |
|
||||
| ------------------------------ | -------------------------------------------------------------------------------------------------------------------------- | ----- |
|
||||
| `migration.command` | Override default container command (useful when using custom images) | `[]` |
|
||||
| `migration.args` | Override default container args (useful when using custom images) | `[]` |
|
||||
| `migration.extraEnvVars` | Array containing extra env vars to configure the Kong migration job | `[]` |
|
||||
| `migration.extraEnvVarsCM` | ConfigMap containing extra env vars to configure the Kong migration job | `""` |
|
||||
| `migration.extraEnvVarsSecret` | Secret containing extra env vars to configure the Kong migration job (in case of sensitive data) | `""` |
|
||||
| `migration.extraVolumeMounts` | Array of extra volume mounts to be added to the Kong Container (evaluated as template). Normally used with `extraVolumes`. | `[]` |
|
||||
| `migration.resources.limits` | The resources limits for the container | `{}` |
|
||||
| `migration.resources.requests` | The requested resources for the container | `{}` |
|
||||
| `migration.hostAliases` | Add deployment host aliases | `[]` |
|
||||
| `migration.annotations` | Add annotations to the job | `{}` |
|
||||
| `migration.podLabels` | Additional pod labels | `{}` |
|
||||
| `migration.podAnnotations` | Additional pod annotations | `{}` |
|
||||
| Name | Description | Value |
|
||||
| ---------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- | ------ |
|
||||
| `migration.command` | Override default container command (useful when using custom images) | `[]` |
|
||||
| `migration.args` | Override default container args (useful when using custom images) | `[]` |
|
||||
| `migration.extraEnvVars` | Array containing extra env vars to configure the Kong migration job | `[]` |
|
||||
| `migration.extraEnvVarsCM` | ConfigMap containing extra env vars to configure the Kong migration job | `""` |
|
||||
| `migration.extraEnvVarsSecret` | Secret containing extra env vars to configure the Kong migration job (in case of sensitive data) | `""` |
|
||||
| `migration.extraVolumeMounts` | Array of extra volume mounts to be added to the Kong Container (evaluated as template). Normally used with `extraVolumes`. | `[]` |
|
||||
| `migration.resources.limits` | The resources limits for the container | `{}` |
|
||||
| `migration.resources.requests` | The requested resources for the container | `{}` |
|
||||
| `migration.automountServiceAccountToken` | Mount Service Account token in pod | `true` |
|
||||
| `migration.hostAliases` | Add deployment host aliases | `[]` |
|
||||
| `migration.annotations` | Add annotations to the job | `{}` |
|
||||
| `migration.podLabels` | Additional pod labels | `{}` |
|
||||
| `migration.podAnnotations` | Additional pod annotations | `{}` |
|
||||
|
||||
### PostgreSQL Parameters
|
||||
|
||||
|
||||
@@ -49,6 +49,7 @@ spec:
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- include "kong.imagePullSecrets" . | nindent 6 }}
|
||||
automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
|
||||
{{- if .Values.hostAliases }}
|
||||
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.hostAliases "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
|
||||
@@ -30,6 +30,7 @@ spec:
|
||||
{{- if .Values.podSecurityContext.enabled }}
|
||||
securityContext: {{- omit .Values.podSecurityContext "enabled" | toYaml | nindent 8 }}
|
||||
{{- end }}
|
||||
automountServiceAccountToken: {{ .Values.migration.automountServiceAccountToken }}
|
||||
{{- if .Values.migration.hostAliases }}
|
||||
hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.migration.hostAliases "context" $) | nindent 8 }}
|
||||
{{- end }}
|
||||
|
||||
@@ -158,6 +158,9 @@ podSecurityContext:
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
rollingUpdate: {}
|
||||
## @param automountServiceAccountToken Mount Service Account token in pod
|
||||
##
|
||||
automountServiceAccountToken: true
|
||||
## @param hostAliases Add deployment host aliases
|
||||
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
|
||||
##
|
||||
@@ -714,7 +717,7 @@ ingressController:
|
||||
serviceAccount:
|
||||
create: true
|
||||
name: ""
|
||||
automountServiceAccountToken: true
|
||||
automountServiceAccountToken: false
|
||||
annotations: {}
|
||||
## @param ingressController.rbac.create Create the necessary RBAC resources for the Ingress Controller to work
|
||||
## @param ingressController.rbac.rules Custom RBAC rules
|
||||
@@ -774,6 +777,9 @@ migration:
|
||||
resources:
|
||||
limits: {}
|
||||
requests: {}
|
||||
## @param migration.automountServiceAccountToken Mount Service Account token in pod
|
||||
##
|
||||
automountServiceAccountToken: true
|
||||
## @param migration.hostAliases Add deployment host aliases
|
||||
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
|
||||
##
|
||||
|
||||
Reference in New Issue
Block a user