easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #1070 from ArthurSens/as/psp-respect-common-ns

Browse Source 
Psp should be deployed at the same namespace as kube-prometheus stack
This commit is contained in:
Paweł Krupa
2021-04-12 10:31:51 +02:00
committed by GitHub
parent 9b5b9dccf7 069f95148f
commit 7a3879ba49
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
View File

@@ -59,6 +59,7 @@ local restrictedPodSecurityPolicy = {
kind: 'Role', kind: 'Role',
metadata: { metadata: {
name: 'alertmanager-' + $.values.alertmanager.name, name: 'alertmanager-' + $.values.alertmanager.name,
namespace: $.values.common.namespace,
}, },
rules: [{ rules: [{
apiGroups: ['policy'], apiGroups: ['policy'],
@@ -73,6 +74,7 @@ local restrictedPodSecurityPolicy = {
kind: 'RoleBinding', kind: 'RoleBinding',
metadata: { metadata: {
name: 'alertmanager-' + $.values.alertmanager.name, name: 'alertmanager-' + $.values.alertmanager.name,
namespace: $.values.common.namespace,
}, },
roleRef: { roleRef: {
apiGroup: 'rbac.authorization.k8s.io', apiGroup: 'rbac.authorization.k8s.io',
@@ -126,6 +128,7 @@ local restrictedPodSecurityPolicy = {
kind: 'Role', kind: 'Role',
metadata: { metadata: {
name: 'grafana', name: 'grafana',
namespace: $.values.common.namespace,
}, },
rules: [{ rules: [{
apiGroups: ['policy'], apiGroups: ['policy'],
@@ -140,6 +143,7 @@ local restrictedPodSecurityPolicy = {
kind: 'RoleBinding', kind: 'RoleBinding',
metadata: { metadata: {
name: 'grafana', name: 'grafana',
namespace: $.values.common.namespace,
}, },
roleRef: { roleRef: {
apiGroup: 'rbac.authorization.k8s.io', apiGroup: 'rbac.authorization.k8s.io',