Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(helm): add securityContexts to jobs #704

Merged
merged 1 commit into from
Feb 14, 2023
Merged

feat(helm): add securityContexts to jobs #704

merged 1 commit into from
Feb 14, 2023

Conversation

zvlb
Copy link
Contributor

@zvlb zvlb commented Feb 14, 2023

local test:

~ kind create cluster
...

~ k cluster-info
Kubernetes control plane is running at https://127.0.0.1:61015
CoreDNS is running at https://127.0.0.1:61015/api/v1/namespaces/kube-system/services/kube-dns:dns/proxy

To further debug and diagnose cluster problems, use 'kubectl cluster-info dump'.

~ helm install capsule . -n capsule-system --create-namespace 
NAME: capsule
LAST DEPLOYED: Tue Feb 14 17:34:56 2023
NAMESPACE: capsule-system
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
...

~ k create -f - << EOF
apiVersion: capsule.clastix.io/v1beta2
kind: Tenant
metadata:
  name: oil
spec:
  owners:
  - name: alice
    kind: User
EOF
tenant.capsule.clastix.io/oil created

~ k get tenants
NAME   STATE    NAMESPACE QUOTA   NAMESPACE COUNT   NODE SELECTOR   AGE
oil    Active                     0                                 6s

~ ../../hack/create-user.sh alice oil
creating certs in TMPDIR /var/folders/c7/78_t4pvj5zd2qrcwgq05h7_40000gn/T/tmp.EC4Ogyzl
merging groups /O=capsule.clastix.io
Generating RSA private key, 2048 bit long modulus
......................................................................+++
.+++
e is 65537 (0x10001)
certificatesigningrequest.certificates.k8s.io/alice-oil created
certificatesigningrequest.certificates.k8s.io/alice-oil approved
kubeconfig file is: alice-oil.kubeconfig
to use it as alice export KUBECONFIG=alice-oil.kubeconfig

~ export KUBECONFIG=alice-oil.kubeconfig
~ k create namespace oil-development
namespace/oil-development created

~ export KUBECONFIG=
~ k get tenant oil
NAME   STATE    NAMESPACE QUOTA   NAMESPACE COUNT   NODE SELECTOR   AGE
oil    Active                     1                                 31s

@netlify
Copy link

netlify bot commented Feb 14, 2023

Deploy Preview for capsule-documentation canceled.

Name Link
🔨 Latest commit 0bfc166
🔍 Latest deploy log https://app.netlify.com/sites/capsule-documentation/deploys/63ebad9f9ddb6f00089c8580

Copy link
Member

@prometherion prometherion left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It makes sense to me to have the same securityContextContraints as we have with the controller.

LGTM, thanks @zvlb! 🚀

@prometherion prometherion merged commit fe4954f into projectcapsule:master Feb 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants