[bitnami/contour] Aidan/sidecar rbac options (#7119)

* Add sidecar and rbac customization

Following patters in other charts, sidecar pods and rbac customization
was added

* Bump contour version

* Update contour readme with new values
This commit is contained in:
Aidan
2021-08-02 23:15:36 -07:00
committed by GitHub
parent 72ea1d92cc
commit e034c05310
5 changed files with 32 additions and 1 deletions

View File

@@ -27,4 +27,4 @@ sources:
- https://github.com/envoyproxy/envoy
- https://github.com/bitnami/bitnami-docker-contour
- https://projectcontour.io
version: 5.0.4
version: 5.1.0

View File

@@ -122,6 +122,7 @@ $ helm uninstall my-release
| `contour.tlsExistingSecret` | Name of the existingSecret to be use in Contour deployment. If it is not nil `contour.certgen` will be disabled. | `""` |
| `contour.service.extraPorts` | Extra ports to expose (normally used with the `sidecar` value) | `[]` |
| `contour.initContainers` | Attach additional init containers to Contour pods | `[]` |
| `contour.sidecars` | Add additional sidecar containers to the Contour pods | `[]` |
| `contour.extraVolumes` | Array to add extra volumes | `[]` |
| `contour.extraVolumeMounts` | Array to add extra mounts (normally used with extraVolumes) | `[]` |
| `contour.extraEnvVars` | Array containing extra env vars to be added to all Contour containers | `[]` |
@@ -275,6 +276,7 @@ $ helm uninstall my-release
| Name | Description | Value |
| ------------------- | -------------------------------------------------------------------------------------------------------------------- | ------ |
| `rbac.create` | Create the RBAC roles for API accessibility | `true` |
| `rbac.rules` | Custom RBAC rules | `[]` |
| `tlsExistingSecret` | Name of the existingSecret to be use in both contour and envoy. If it is not nil `contour.certgen` will be disabled. | `""` |

View File

@@ -141,6 +141,9 @@ spec:
name: {{ include "common.tplvalues.render" ( dict "value" .Values.contour.extraEnvVarsSecret "context" $ ) }}
{{- end }}
{{- end }}
{{- if .Values.contour.sidecars }}
{{- include "common.tplvalues.render" ( dict "value" .Values.contour.sidecars "context" $) | nindent 8 }}
{{- end }}
dnsPolicy: ClusterFirst
serviceAccountName: {{ include "contour.contourServiceAccountName" . }}
{{- if .Values.contour.securityContext.enabled }}

View File

@@ -112,6 +112,9 @@ rules:
- create
- get
- update
{{- if .Values.rbac.rules }}
{{- include "common.tplvalues.render" ( dict "value" .Values.rbac.rules "context" $ ) | nindent 2 }}
{{- end }}
---
apiVersion: {{ include "common.capabilities.rbac.apiVersion" . }}
kind: ClusterRoleBinding

View File

@@ -302,6 +302,17 @@ contour:
## imagePullPolicy: Always
##
initContainers: []
## @param contour.sidecars Add additional sidecar containers to the Contour pods
## Example:
## sidecars:
## - name: your-image-name
## image: your-image
## imagePullPolicy: Always
## ports:
## - name: portname
## containerPort: 1234
##
sidecars: []
## @param contour.extraVolumes Array to add extra volumes
##
extraVolumes: []
@@ -814,6 +825,18 @@ prometheus:
##
rbac:
create: true
## @param rbac.rules Custom RBAC rules to set
## e.g:
## rules:
## - apiGroups:
## - ""
## resources:
## - pods
## verbs:
## - get
## - list
##
rules: []
## @param tlsExistingSecret Name of the existingSecret to be use in both contour and envoy. If it is not nil `contour.certgen` will be disabled.
##
tlsExistingSecret: ""