panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Auto add default CSIDriver labels on OpenShift

Browse Source 
Signed-off-by: Kevin Fox <[email protected]>
This commit is contained in:
Kevin Fox
2023-11-20 10:24:53 +01:00
committed by Marco Franssen
parent c9885de539
commit 966061c6c7
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spiffe-csi-driver/templates/spiffe-csi-driver.yaml
+6 -1
View File
@@ -1,8 +1,13 @@
{{- $labels := dict }}
{{- if (dig "openshift" false .Values.global) }}
{{- $_ := set $labels "security.openshift.io/csi-ephemeral-volume-profile" "restricted" }}
{{- end }}
{{- $labels = mergeOverwrite $labels .Values.csiDriverLabels }}
apiVersion: storage.k8s.io/v1 apiVersion: storage.k8s.io/v1
kind: CSIDriver kind: CSIDriver
metadata: metadata:
name: {{ .Values.pluginName | quote }} name: {{ .Values.pluginName | quote }}
{{- with .Values.csiDriverLabels }} {{- with $labels }}
labels: labels:
{{- toYaml . | nindent 4 }} {{- toYaml . | nindent 4 }}
{{- end }} {{- end }}
examples/openshift/openshift-values.yaml
-2
View File
@@ -58,8 +58,6 @@ tornjak-frontend:
fsGroup: null fsGroup: null
spiffe-csi-driver: spiffe-csi-driver:
csiDriverLabels:
security.openshift.io/csi-ephemeral-volume-profile: restricted
initContainers: initContainers:
- terminationMessagePath: /dev/termination-log - terminationMessagePath: /dev/termination-log
name: set-context name: set-context