-
Notifications
You must be signed in to change notification settings - Fork 16.8k
[incubator/vault] Add support for creating a service account #9429
Conversation
/assign @viglesiasce |
/assign @seanknox |
👀 PTAL! |
/assign |
Bumped chart version |
/ok-to-test |
@jpds can you take a look? |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions. |
@jbialy , There is a conflict because the chart version was bumped by other PRs... |
The tests are ✅. @viglesiasce @unguiculus @jpds . Can you guys give this a |
Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
Bump! PTAL! |
/lgtm |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: jbialy, mattfarina The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This line is causing a templating error because the template function doesn't exist.
name: {{ template "vault.serviceAccountName" . }} | ||
labels: | ||
app: {{ template "vault.name" . }} | ||
chart: {{ template "vault.chart" . }} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is incorrect as the vault.chart
template doesn't exist - did you forget to add it?
Or you can use what the other vault manifests use: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
Any chance of a quick fix for this @jbialy ?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, good catch! I likely grabbed the serviceaccount
definition from another chart, and overlooked the way the chart
label is set!
I'll adjust it to use {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
as you suggested!
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
* option for creating a service account Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com> * bump chart version Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
What this PR does / why we need it:
In situations where we want Vault to have access to the api server a service account is required. An example for this is when using Vault's Kubernetes auth method.
https://www.vaultproject.io/docs/auth/kubernetes.html#configuring-kubernetes
This PR enables service account creation if needed.
Special notes for your reviewer:
Checklist