pulsar-helm-chart

apache/pulsar-helm-chart

Fork 0

Commit Graph

Author	SHA1	Message	Date
Frank Kelly	9613ee0292	Make PodSecurityPolicy name unique in k8s cluster when rbac.limit_to_namespace is true (#224 ) - allows having multiple Pulsar clusters in different K8S namespaces but having the same helm release name - PodSecurityPolicy is a cluster-level-resource and name would collide without this change	2022-02-04 10:41:10 +02:00
Lari Hotari	c3e4ea272b	Fix deprecation warning about rbac.authorization.k8s.io/v1beta1 (#135 )	2021-07-03 10:56:58 +03:00
Miecio	23ba8ac948	Fix for missing PSP for bookie initialize and other (#101 ) ### Motivation When using standard bookkeeper installation on PSP cluster initialization fails because has to be started as root ### Modifications Add same ServiceAccount and SecurityContext for bookkeeper-cluster-initialize as in bookkeeper specyfication. UPDATE: Seems that when using in cluster TLS encryption other components also require RW access to root FS, I added PSP for proxy, zookeepe, broker and toolset ### Verifying this change - [x] Make sure that the change passes the CI checks.	2021-01-30 09:22:52 -08:00

Author

SHA1

Message

Date

Frank Kelly

9613ee0292

Make PodSecurityPolicy name unique in k8s cluster when rbac.limit_to_namespace is true (#224 )

- allows having multiple Pulsar clusters in different K8S namespaces but having the same helm release name
  - PodSecurityPolicy is a cluster-level-resource and name would collide without this change

2022-02-04 10:41:10 +02:00

Lari Hotari

c3e4ea272b

Fix deprecation warning about rbac.authorization.k8s.io/v1beta1 (#135 )

2021-07-03 10:56:58 +03:00

Miecio

23ba8ac948

Fix for missing PSP for bookie initialize and other (#101 )

### Motivation

When using standard bookkeeper installation on PSP cluster initialization fails because has to be started as root

### Modifications

Add same ServiceAccount and SecurityContext for bookkeeper-cluster-initialize as in bookkeeper specyfication.

UPDATE: Seems that when using in cluster TLS encryption other components also require RW access to root FS, I added PSP for proxy, zookeepe, broker and toolset

### Verifying this change

- [x] Make sure that the change passes the CI checks.

2021-01-30 09:22:52 -08:00

3 Commits