Skip to content

Commit

Permalink
Update permissions.md (#2574)
Browse files Browse the repository at this point in the history
Change the default value of script pod service account
  • Loading branch information
ryanrousseau authored Nov 25, 2024
1 parent f43d4b4 commit 5bb2402
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ The service account for script pods can be customized in a few ways:
|:----------------------------------------------|:-----------------------------------------------------------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| `scriptPods.serviceAccount.targetNamespaces` | Limit the namespaces that the service account can interact with. | `[]`<br/>(When empty, all namespaces are allowed.) |
| `scriptPods.serviceAccount.clusterRole.rules` | Give the service account custom rules | <pre>- apiGroups:<br/>&nbsp;&nbsp;- '\*'<br/>&nbsp;&nbsp;resources:<br/>&nbsp;&nbsp;- '\*'<br/>&nbsp;&nbsp;verbs:<br/>&nbsp;&nbsp;- '\*'<br/>- nonResourceURLs:<br/>&nbsp;&nbsp;- '\*'<br/>&nbsp;&nbsp;verbs:<br/>&nbsp;&nbsp;- '\*'</pre> |
| `scriptPods.serviceAccount.name` | The name of the scriptPods service account | `<agent-name>-tentacle` |
| `scriptPods.serviceAccount.name` | The name of the scriptPods service account | `<agent-name>-scripts` |
| `scriptPods.serviceAccount.annotations` | Annotations given to the service account | `[]` |

### Examples
Expand Down Expand Up @@ -118,4 +118,4 @@ oci://registry-1.docker.io/octopusdeploy/kubernetes-agent

# NFS Server Pod Permissions

If you have not provided a predefined storageClassName for persistence, an NFS pod will be used. This NFS Server pod requires `privileged` access. For more information see [Kubernetes agent Storage](/docs/infrastructure/deployment-targets/kubernetes/kubernetes-agent/storage#nfs-storage).
If you have not provided a predefined storageClassName for persistence, an NFS pod will be used. This NFS Server pod requires `privileged` access. For more information see [Kubernetes agent Storage](/docs/infrastructure/deployment-targets/kubernetes/kubernetes-agent/storage#nfs-storage).

0 comments on commit 5bb2402

Please sign in to comment.