From 4ff8f34c12153021af4e1ad0be7ebaab49e3afdb Mon Sep 17 00:00:00 2001 From: becitsthere Date: Tue, 8 Dec 2020 11:30:00 -0800 Subject: [PATCH] If SA other than 'default' is needed, it should be created manually --- README.md | 12 +++++++++++- charts/core/Chart.yaml | 2 +- charts/core/templates/serviceaccount.yaml | 5 ----- charts/crd/Chart.yaml | 2 +- charts/crd/templates/serviceaccount.yaml | 5 ----- 5 files changed, 13 insertions(+), 13 deletions(-) delete mode 100644 charts/core/templates/serviceaccount.yaml delete mode 100644 charts/crd/templates/serviceaccount.yaml diff --git a/README.md b/README.md index 0fa7ad2e..ffd5a3cc 100644 --- a/README.md +++ b/README.md @@ -18,6 +18,11 @@ $ helm search neuvector/core $ kubectl create namespace neuvector ``` +- Create a new service account **if** you don't want to use the 'default'. Specify the service account name in charts' values.yaml file. +```console +$ kubectl create serviceaccount neuvector -n neuvector +``` + - Configure Kubernetes to pull from the private NeuVector registry on Docker Hub. ```console $ kubectl create secret docker-registry regsecret -n neuvector --docker-server=https://index.docker.io/v1/ --docker-username=your-name --docker-password=your-pword --docker-email=your-email @@ -38,7 +43,12 @@ $ helm install --name my-release --namespace neuvector neuvector/core --set ima $ oc new-project neuvector ``` -- Grant Service Account Access to the Privileged SCC. Please replace the service account name that you plan to use. You can specify the service account to manage NeuVector deployment in values.yaml. +- Create a new service account **if** you don't want to use the 'default'. Specify the service account name in charts' values.yaml file. +```console +$ oc create serviceaccount neuvector -n neuvector +``` + +- Grant Service Account Access to the Privileged SCC. Please replace the service account name that you plan to use. ```console $ oc -n neuvector adm policy add-scc-to-user privileged -z default ``` diff --git a/charts/core/Chart.yaml b/charts/core/Chart.yaml index e03837ad..11371d49 100644 --- a/charts/core/Chart.yaml +++ b/charts/core/Chart.yaml @@ -1,6 +1,6 @@ name: core apiVersion: v1 -version: 1.6.5 +version: 1.6.6 appVersion: 4.0.0 description: Helm chart for NeuVector's core services home: https://neuvector.com diff --git a/charts/core/templates/serviceaccount.yaml b/charts/core/templates/serviceaccount.yaml deleted file mode 100644 index f5cf414a..00000000 --- a/charts/core/templates/serviceaccount.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ .Values.serviceAccount }} - namespace: {{ .Release.Namespace }} diff --git a/charts/crd/Chart.yaml b/charts/crd/Chart.yaml index 66133853..fc1985c2 100644 --- a/charts/crd/Chart.yaml +++ b/charts/crd/Chart.yaml @@ -1,6 +1,6 @@ name: crd apiVersion: v1 -version: 1.6.3 +version: 1.6.4 appVersion: 4.0.0 description: Helm chart for NeuVector's CRD services home: https://neuvector.com diff --git a/charts/crd/templates/serviceaccount.yaml b/charts/crd/templates/serviceaccount.yaml deleted file mode 100644 index f5cf414a..00000000 --- a/charts/crd/templates/serviceaccount.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ .Values.serviceAccount }} - namespace: {{ .Release.Namespace }}