diff --git a/chart/k8sdb-controller/Chart.yaml b/chart/k8sdb-controller/Chart.yaml index cef6164..f3782be 100644 --- a/chart/k8sdb-controller/Chart.yaml +++ b/chart/k8sdb-controller/Chart.yaml @@ -12,4 +12,4 @@ keywords: name: k8sdb-controller sources: - https://github.com/DoodleScheduling/k8sdb-controller -version: 0.3.1 +version: 0.3.2 diff --git a/chart/k8sdb-controller/templates/deployment.yaml b/chart/k8sdb-controller/templates/deployment.yaml index 38e8af5..8477258 100644 --- a/chart/k8sdb-controller/templates/deployment.yaml +++ b/chart/k8sdb-controller/templates/deployment.yaml @@ -88,7 +88,7 @@ spec: - --upstream=http://127.0.0.1:{{ .Values.metricsPort }} - --logtostderr=true - --v=0 - image: quay.io/brancz/kube-rbac-proxy:v0.14.0 + image: {{ .Values.kubeRBACProxy.image }} imagePullPolicy: IfNotPresent name: kube-rbac-proxy ports: diff --git a/chart/k8sdb-controller/templates/metrics-rbac.yaml b/chart/k8sdb-controller/templates/metrics-rbac.yaml index 4f81db9..d0e5afb 100644 --- a/chart/k8sdb-controller/templates/metrics-rbac.yaml +++ b/chart/k8sdb-controller/templates/metrics-rbac.yaml @@ -16,6 +16,24 @@ rules: --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding +metadata: + name: {{ include "k8sdb-controller.fullname" . }}-metrics + labels: + app.kubernetes.io/name: {{ include "k8sdb-controller.name" . }} + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/managed-by: {{ .Release.Service }} + helm.sh/chart: {{ include "k8sdb-controller.chart" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ include "k8sdb-controller.fullname" . }}-metrics-reader +subjects: +- kind: ServiceAccount + name: {{ template "k8sdb-controller.serviceAccountName" . }} + namespace: {{ .Release.Namespace }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding metadata: name: {{ include "k8sdb-controller.fullname" . }}-proxy labels: diff --git a/chart/k8sdb-controller/values.yaml b/chart/k8sdb-controller/values.yaml index 5a13647..1514fad 100644 --- a/chart/k8sdb-controller/values.yaml +++ b/chart/k8sdb-controller/values.yaml @@ -122,7 +122,7 @@ prometheusRule: kubeRBACProxy: enabled: true - + image: quay.io/brancz/kube-rbac-proxy:v0.14.2 securityContext: allowPrivilegeEscalation: false capabilities: