mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-31 03:45:17 +00:00
3fa0bb1f27
* feat: remove reports controller from kyverno admission controller Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * helm Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * fix Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * rbac Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * codegen Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * helm Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * helm Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * helm Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> * codegen Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com> Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
67 lines
2.7 KiB
Smarty
67 lines
2.7 KiB
Smarty
{{/* vim: set filetype=mustache: */}}
|
|
|
|
{{- define "kyverno.reports-controller.name" -}}
|
|
{{ template "kyverno.name" . }}-reports-controller
|
|
{{- end -}}
|
|
|
|
{{- define "kyverno.reports-controller.labels" -}}
|
|
app.kubernetes.io/part-of: {{ template "kyverno.name" . }}
|
|
{{- with (include "kyverno.helmLabels" .) }}
|
|
{{ . }}
|
|
{{- end }}
|
|
{{- with (include "kyverno.versionLabels" .) }}
|
|
{{ . }}
|
|
{{- end }}
|
|
{{- with (include "kyverno.reports-controller.matchLabels" .) }}
|
|
{{ . }}
|
|
{{- end }}
|
|
{{- end -}}
|
|
|
|
{{- define "kyverno.reports-controller.matchLabels" -}}
|
|
app.kubernetes.io/component: reports-controller
|
|
app.kubernetes.io/name: {{ template "kyverno.reports-controller.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
{{- end -}}
|
|
|
|
{{- define "kyverno.reports-controller.image" -}}
|
|
{{- if .image.registry -}}
|
|
{{ .image.registry }}/{{ required "An image repository is required" .image.repository }}:{{ default .defaultTag .image.tag }}
|
|
{{- else -}}
|
|
{{ required "An image repository is required" .image.repository }}:{{ default .defaultTag .image.tag }}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
|
|
{{- define "kyverno.reports-controller.roleName" -}}
|
|
{{ .Release.Name }}:reports-controller
|
|
{{- end -}}
|
|
|
|
{{/* Create the name of the service account to use */}}
|
|
{{- define "kyverno.reports-controller.serviceAccountName" -}}
|
|
{{- if .Values.reportsController.rbac.create -}}
|
|
{{ default (include "kyverno.reports-controller.name" .) .Values.reportsController.rbac.serviceAccount.name }}
|
|
{{- else -}}
|
|
{{ required "A service account name is required when `rbac.create` is set to `false`" .Values.reportsController.rbac.serviceAccount.name }}
|
|
{{- end -}}
|
|
{{- end -}}
|
|
|
|
{{- define "kyverno.reports-controller.securityContext" -}}
|
|
{{- if semverCompare "<1.19" .Capabilities.KubeVersion.Version }}
|
|
{{ toYaml (omit .Values.reportsController.securityContext "seccompProfile") }}
|
|
{{- else }}
|
|
{{ toYaml .Values.reportsController.securityContext }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/* Create the default PodDisruptionBudget to use */}}
|
|
{{- define "kyverno.reports-controller.podDisruptionBudget.spec" -}}
|
|
{{- if and .Values.reportsController.podDisruptionBudget.minAvailable .Values.reportsController.podDisruptionBudget.maxUnavailable }}
|
|
{{- fail "Cannot set both .Values.reportsController.podDisruptionBudget.minAvailable and .Values.reportsController.podDisruptionBudget.maxUnavailable" -}}
|
|
{{- end }}
|
|
{{- if not .Values.reportsController.podDisruptionBudget.maxUnavailable }}
|
|
minAvailable: {{ default 1 .Values.reportsController.podDisruptionBudget.minAvailable }}
|
|
{{- end }}
|
|
{{- if .Values.reportsController.podDisruptionBudget.maxUnavailable }}
|
|
maxUnavailable: {{ .Values.reportsController.podDisruptionBudget.maxUnavailable }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|