openstack
/
openstack-helm-addons
Code Issues Proposed changes
RETIRED, Addons repository for OpenStack Helm
70 Commits 1 Branch 0 Tags 4.8 MiB
Go to file
Dustin Specker 1765e62acb Add readonly ServiceAccount in Sonobuoy chart 
Using this readonly ServiceAccount enables plugins
to use a Kubernetes client with different permissions
than the Sonobuoy ServiceAccount, which has full
permissions on the cluster.

This ServiceAccount enables get/list/watch on all resource types in all
API groups.

The reason the secret is used to mount the service account token because
there is not a way to specify a service account from just a container
spec [1]. Sonobuoy doesn't provide access to the pod spec for plugins,
so we are limited to the container spec.

[1] https://github.com/kubernetes/kubernetes/issues/66020

Change-Id: I69aeaaedf1fb7672f7167c83b220cf6abb890cb5
 		2019-01-22 14:26:05 +00:00
artifactory Align Artifactory's values.yaml with proposed spec and patterns 2018-10-22 09:55:08 -05:00
mini-mirror Add mini-mirror chart 2018-11-22 05:21:29 -06:00
ranger Encrease probe check time to allow git cloning 2018-12-26 23:35:32 -06:00
ranger-agent Ranger-Agent: add labels to test pod 2018-12-16 18:53:33 +00:00
shaker Add shaker charts and shaker deployment scripts 2018-12-05 20:39:42 +00:00
sonobuoy Add readonly ServiceAccount in Sonobuoy chart 2019-01-22 14:26:05 +00:00
tools/gate Update upgrade host playbook 2018-12-14 19:43:19 +00:00
.gitignore Initial Commit of Makefile and Readme 2017-05-31 08:27:43 -05:00
.gitreview Added .gitreview 2017-05-30 08:19:08 +00:00
.zuul.yaml Store Sonobuoy results in Ceph 2018-11-09 19:25:08 +00:00
CONTRIBUTING.rst Migrate tools/ from OS-H to OS-H-Addons 2017-06-20 16:05:34 -05:00
LICENSE Initial Commit of Makefile and Readme 2017-05-31 08:27:43 -05:00
Makefile Makefile: sync with openstack-helm 2018-02-20 16:54:10 +00:00
README.rst Update the OSH-Addons README to reflect OSH's README 2017-07-05 08:58:37 -05:00

README.rst

Openstack-Helm-Addons

Mission

The goal of OpenStack-Helm-Addons is to provide charts for services to enhance or provide additional features for the charts in OpenStack-Helm.

For more information, please refer to the OpenStack-Helm repository.

Communication

  • Join us on Slack - #openstack-helm
  • Join us on IRC: #openstack-helm on freenode
  • Community IRC Meetings: [Every Tuesday @ 3PM UTC], #openstack-meeting-5 on freenode
  • Meeting Agenda Items: Agenda

Launchpad

Bugs and blueprints are tracked via OpenStack-Helm's Launchpad. Any bugs or blueprints filed in the OpenStack-Helm-Addons Launchpad will be closed and requests will be made to file them in the appropriate location.