Add dedicated service accounts per controller
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
This commit is contained in:
4
manifests/bases/helm-controller/account.yaml
Normal file
4
manifests/bases/helm-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: helm-controller
|
||||
@@ -3,6 +3,7 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/helm-controller/archive/v0.6.0.zip//helm-controller-0.6.0/config/crd
|
||||
- https://github.com/fluxcd/helm-controller/archive/v0.6.0.zip//helm-controller-0.6.0/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
|
||||
@@ -1,3 +1,6 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/args/0
|
||||
value: --events-addr=http://notification-controller/
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: helm-controller
|
||||
|
||||
4
manifests/bases/image-automation-controller/account.yaml
Normal file
4
manifests/bases/image-automation-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: image-automation-controller
|
||||
@@ -3,6 +3,7 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/image-automation-controller/archive/v0.4.0.zip//image-automation-controller-0.4.0/config/crd
|
||||
- https://github.com/fluxcd/image-automation-controller/archive/v0.4.0.zip//image-automation-controller-0.4.0/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
|
||||
@@ -1,3 +1,6 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/args/0
|
||||
value: --events-addr=http://notification-controller/
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: image-automation-controller
|
||||
|
||||
4
manifests/bases/image-reflector-controller/account.yaml
Normal file
4
manifests/bases/image-reflector-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: image-reflector-controller
|
||||
@@ -3,6 +3,7 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/image-reflector-controller/archive/v0.4.1.zip//image-reflector-controller-0.4.1/config/crd
|
||||
- https://github.com/fluxcd/image-reflector-controller/archive/v0.4.1.zip//image-reflector-controller-0.4.1/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
|
||||
@@ -1,3 +1,6 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/args/0
|
||||
value: --events-addr=http://notification-controller/
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: image-reflector-controller
|
||||
|
||||
4
manifests/bases/kustomize-controller/account.yaml
Normal file
4
manifests/bases/kustomize-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: kustomize-controller
|
||||
@@ -3,6 +3,7 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/kustomize-controller/archive/v0.7.0.zip//kustomize-controller-0.7.0/config/crd
|
||||
- https://github.com/fluxcd/kustomize-controller/archive/v0.7.0.zip//kustomize-controller-0.7.0/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
|
||||
@@ -1,3 +1,6 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/args/0
|
||||
value: --events-addr=http://notification-controller/
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: kustomize-controller
|
||||
|
||||
4
manifests/bases/notification-controller/account.yaml
Normal file
4
manifests/bases/notification-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: notification-controller
|
||||
@@ -3,3 +3,11 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/notification-controller/archive/v0.7.0.zip//notification-controller-0.7.0/config/crd
|
||||
- https://github.com/fluxcd/notification-controller/archive/v0.7.0.zip//notification-controller-0.7.0/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
version: v1
|
||||
kind: Deployment
|
||||
name: notification-controller
|
||||
path: patch.yaml
|
||||
|
||||
3
manifests/bases/notification-controller/patch.yaml
Normal file
3
manifests/bases/notification-controller/patch.yaml
Normal file
@@ -0,0 +1,3 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: notification-controller
|
||||
4
manifests/bases/source-controller/account.yaml
Normal file
4
manifests/bases/source-controller/account.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: source-controller
|
||||
@@ -3,6 +3,7 @@ kind: Kustomization
|
||||
resources:
|
||||
- https://github.com/fluxcd/source-controller/archive/v0.7.0.zip//source-controller-0.7.0/config/crd
|
||||
- https://github.com/fluxcd/source-controller/archive/v0.7.0.zip//source-controller-0.7.0/config/manager
|
||||
- account.yaml
|
||||
patchesJson6902:
|
||||
- target:
|
||||
group: apps
|
||||
|
||||
@@ -1,3 +1,6 @@
|
||||
- op: add
|
||||
path: /spec/template/spec/containers/0/args/0
|
||||
value: --events-addr=http://notification-controller/
|
||||
- op: add
|
||||
path: /spec/template/spec/serviceAccountName
|
||||
value: source-controller
|
||||
|
||||
Reference in New Issue
Block a user