panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add before-hook-creation delete policy

Browse Source 
Signed-off-by: Faisal Memon <[email protected]>
This commit is contained in:
Faisal Memon
2023-04-09 22:22:59 +02:00
committed by Marco Franssen
parent f6219d9627
commit eeda0428b4
3 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/templates/post-install-hook.yaml
+4 -4
View File
@@ -9,7 +9,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": post-install "helm.sh/hook": post-install
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
@@ -17,7 +17,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-post-install name: {{ include "spire-server.fullname" . }}-post-install
annotations: annotations:
"helm.sh/hook": post-install "helm.sh/hook": post-install
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
rules: rules:
- apiGroups: ["admissionregistration.k8s.io"] - apiGroups: ["admissionregistration.k8s.io"]
resources: ["validatingwebhookconfigurations"] resources: ["validatingwebhookconfigurations"]
@@ -30,7 +30,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-post-install name: {{ include "spire-server.fullname" . }}-post-install
annotations: annotations:
"helm.sh/hook": post-install "helm.sh/hook": post-install
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ include "spire-server.serviceAccountName" . }}-post-install name: {{ include "spire-server.serviceAccountName" . }}-post-install
@@ -49,7 +49,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": post-install "helm.sh/hook": post-install
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
spec: spec:
template: template:
metadata: metadata:
charts/spire/charts/spire-server/templates/post-upgrade-hook.yaml
+4 -4
View File
@@ -9,7 +9,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": post-upgrade "helm.sh/hook": post-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
@@ -17,7 +17,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-post-upgrade name: {{ include "spire-server.fullname" . }}-post-upgrade
annotations: annotations:
"helm.sh/hook": post-upgrade "helm.sh/hook": post-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
rules: rules:
- apiGroups: ["admissionregistration.k8s.io"] - apiGroups: ["admissionregistration.k8s.io"]
resources: ["validatingwebhookconfigurations"] resources: ["validatingwebhookconfigurations"]
@@ -30,7 +30,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-post-upgrade name: {{ include "spire-server.fullname" . }}-post-upgrade
annotations: annotations:
"helm.sh/hook": post-upgrade "helm.sh/hook": post-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ include "spire-server.serviceAccountName" . }}-post-upgrade name: {{ include "spire-server.serviceAccountName" . }}-post-upgrade
@@ -49,7 +49,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": post-upgrade "helm.sh/hook": post-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
spec: spec:
template: template:
metadata: metadata:
charts/spire/charts/spire-server/templates/pre-upgrade-hook.yaml
+4 -4
View File
@@ -9,7 +9,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": pre-upgrade "helm.sh/hook": pre-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole kind: ClusterRole
@@ -17,7 +17,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-pre-upgrade name: {{ include "spire-server.fullname" . }}-pre-upgrade
annotations: annotations:
"helm.sh/hook": pre-upgrade "helm.sh/hook": pre-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
rules: rules:
- apiGroups: ["admissionregistration.k8s.io"] - apiGroups: ["admissionregistration.k8s.io"]
resources: ["validatingwebhookconfigurations"] resources: ["validatingwebhookconfigurations"]
@@ -30,7 +30,7 @@ metadata:
name: {{ include "spire-server.fullname" . }}-pre-upgrade name: {{ include "spire-server.fullname" . }}-pre-upgrade
annotations: annotations:
"helm.sh/hook": pre-upgrade "helm.sh/hook": pre-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: {{ include "spire-server.serviceAccountName" . }}-pre-upgrade name: {{ include "spire-server.serviceAccountName" . }}-pre-upgrade
@@ -49,7 +49,7 @@ metadata:
{{- include "spire-server.labels" . | nindent 4 }} {{- include "spire-server.labels" . | nindent 4 }}
annotations: annotations:
"helm.sh/hook": pre-upgrade "helm.sh/hook": pre-upgrade
"helm.sh/hook-delete-policy": hook-succeeded, hook-failed "helm.sh/hook-delete-policy": before-hook-creation, hook-succeeded, hook-failed
spec: spec:
template: template:
metadata: metadata: