fix(helm): run keel with created serviceaccount and not as cluster-admin

ci: test with helm 3
pull/572/head
Thomas Gosteli 2021-01-05 10:54:03 +01:00
parent aa4a9f7fd7
commit 1bb67d1d9a
3 changed files with 4 additions and 6 deletions

View File

@ -34,7 +34,7 @@ jobs:
shellcheck -x .test/e2e-kind.sh
lint-charts:
docker:
- image: quay.io/helmpack/chart-testing:v2.0.1
- image: quay.io/helmpack/chart-testing:v3.3.1
steps:
- checkout
- run:
@ -47,7 +47,7 @@ jobs:
machine: true
environment:
CHART_TESTING_IMAGE: quay.io/helmpack/chart-testing
CHART_TESTING_TAG: v2.0.1
CHART_TESTING_TAG: v3.3.1
CHARTS_REPO: https://github.com/keel-hq/keel
K8S_VERSION: v1.11.3
steps:

View File

@ -1,7 +1,7 @@
apiVersion: v1
name: keel
description: Open source, tool for automating Kubernetes deployment updates. Keel is stateless, robust and lightweight.
version: 0.9.5
version: 0.9.6
# Note that we use appVersion to get images tag, so make sure this is correct.
appVersion: 0.16.1
keywords:

View File

@ -1,14 +1,12 @@
{{- if .Values.rbac.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
# apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: {{ template "keel.name" . }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
# name: {{ template "keel.name" . }}
name: cluster-admin
name: {{ template "keel.name" . }}
subjects:
- kind: ServiceAccount
name: {{ template "serviceAccount.name" . }}