openstack
/
openstack-helm-infra
Code Issues Proposed changes

Fix application name for grafana session sync 

Implement helm-toolkit snippet for grafana add-home-dashboard
which adds security context template at pod/container

Change-Id: I12a5fd6c5043079f830eb36043f5b0ca495a3e93
This commit is contained in:
KHIYANI, RAHUL (rk0850) 2020-07-07 16:50:41 -05:00
parent 824f168efc
commit a43f479e6c
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
grafana/templates/job-add-home-dashboard.yaml
View File

@ -36,6 +36,7 @@ spec:
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{ dict "envAll" $envAll "podName" "grafana-add-home-dashboard" "containerNames" (list "add-home-dashboard" "init") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
spec:
{{ dict "envAll" $envAll "application" "add_home_dashboard" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}
restartPolicy: OnFailure
nodeSelector:
@ -46,6 +47,7 @@ spec:
- name: add-home-dashboard
{{ tuple $envAll "add_home_dashboard" | include "helm-toolkit.snippets.image" | indent 10 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.add_home_dashboard | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
{{ dict "envAll" $envAll "application" "add_home_dashboard" "container" "add_home_dashboard" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
env:
- name: GF_SECURITY_ADMIN_USER
valueFrom:
@ -75,4 +77,4 @@ spec:
configMap:
name: grafana-bin
defaultMode: 0555
{{- end }}
{{- end }}

2
grafana/templates/job-db-session-sync.yaml
View File

@ -45,7 +45,7 @@ spec:
- name: grafana-db-session-sync
{{ tuple $envAll "grafana_db_session_sync" | include "helm-toolkit.snippets.image" | indent 10 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.db_session_sync | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
{{ dict "envAll" $envAll "application" "db-session-sync" "container" "grafana_db_session_sync" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
{{ dict "envAll" $envAll "application" "db_session_sync" "container" "grafana_db_session_sync" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
env:
- name: DB_CONNECTION
valueFrom:

2
grafana/values.yaml
View File

@ -81,7 +81,7 @@ pod:
pod:
runAsUser: 104
container:
grafana_set_admin_password:
add_home_dashboard:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
test: