We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
piontec added the following to avoid issues with a jx install on a locked down cluster:
k -n jx create role psp-admin --verb=use --resource=psp --resource-name=privileged - k -n jx create rolebinding bucketrepo --serviceaccount jx:bucketrepo-bucketrepo --role psp-admin - k -n jx create rolebinding check-reaper --serviceaccount jx:check-reaper --role psp-admin - k -n jx create clusterrolebinding jx-check-reaper-admin --serviceaccount jx:check-reaper --clusterrole admin - k -n jx create rolebinding admin-kuberhealthy --serviceaccount jx:kuberhealthy --role psp-admin - k -n jx create rolebinding jx-gx-activities --serviceaccount jx:jx-gcactivities --role psp-admin - k -n jx create rolebinding jx-gcpods --serviceaccount jx:jx-gcpods --role psp-admin - k -n kuberhealthy create role psp-admin --verb=use --resource=psp --resource-name=privileged - k -n kuberhealthy create role psp-admin --verb=use --resource=psp --resource-name=privileged - k -n kuberhealthy create rolebinding admin-kuberhealthy --serviceaccount kuberhealthy:kuberhealthy --role psp-admin - k -n kuberhealthy create rolebinding admin-default --serviceaccount kuberhealthy:default --role psp-admin - k -n kuberhealthy create rolebinding admin-jx-secrets --serviceaccount kuberhealthy:jx-secrets-sa --role psp-admin
hopefully we can make this unnecessary with more PSP settings
The text was updated successfully, but these errors were encountered:
On the other hand PSPs are deprecated in Kubernetes 1.21: https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future/
Sorry, something went wrong.
No branches or pull requests
piontec added the following to avoid issues with a jx install on a locked down cluster:
hopefully we can make this unnecessary with more PSP settings
The text was updated successfully, but these errors were encountered: