Skip to content

Commit

Permalink
remove automount
Browse files Browse the repository at this point in the history
  • Loading branch information
okdas committed Apr 11, 2024
1 parent f56b552 commit 2ef03df
Show file tree
Hide file tree
Showing 4 changed files with 65 additions and 81 deletions.
2 changes: 0 additions & 2 deletions charts/appgate-server/templates/serviceaccount.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,11 @@
apiVersion: v1
kind: ServiceAccount
metadata:
automountServiceAccountToken: true
name: {{ include "appgate-server.serviceAccountName" . }}
labels:
{{- include "appgate-server.labels" . | nindent 4 }}
{{- with .Values.serviceAccount.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
{{- end }}
60 changes: 27 additions & 33 deletions charts/appgate-server/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -39,8 +39,6 @@ fullnameOverride: ""
serviceAccount:
# Specifies whether a service account should be created
create: true
# Automatically mount a ServiceAccount's API credentials
automount: true
# Annotations to add to the service account
annotations: {}
# The name of the service account to use.
Expand All @@ -50,18 +48,16 @@ serviceAccount:
podAnnotations: {}
podLabels: {}

podSecurityContext:
{}
# fsGroup: 2000
podSecurityContext: {}
# fsGroup: 2000

securityContext:
{}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000

service:
type: ClusterIP
Expand All @@ -75,32 +71,30 @@ metrics:
ingress:
enabled: false
className: ""
annotations:
{}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
annotations: {}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
hosts:
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
tls: []
# - secretName: chart-example-tls
# hosts:
# - chart-example.local

resources:
{}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi

autoscaling:
enabled: false
Expand Down
2 changes: 0 additions & 2 deletions charts/relayminer/templates/serviceaccount.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,11 @@
apiVersion: v1
kind: ServiceAccount
metadata:
automountServiceAccountToken: true
name: {{ include "relayminer.serviceAccountName" . }}
labels:
{{- include "relayminer.labels" . | nindent 4 }}
{{- with .Values.serviceAccount.annotations }}
annotations:
{{- toYaml . | nindent 4 }}
{{- end }}
automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
{{- end }}
82 changes: 38 additions & 44 deletions charts/relayminer/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,18 +21,18 @@ config:
query_node_grpc_url: tcp://poktroll-validator:36658
tx_node_rpc_url: tcp://poktroll-validator:36657
proxies:
- proxy_name: http-proxy
type: http
host: 0.0.0.0:8545
- proxy_name: http-proxy
type: http
host: 0.0.0.0:8545
suppliers:
- service_id: anvil
type: http
service_config:
url: http://anvil:8547/
proxy_names:
- http-proxy
hosts:
- tcp://relayminers:8545
- service_id: anvil
type: http
service_config:
url: http://anvil:8547/
proxy_names:
- http-proxy
hosts:
- tcp://relayminers:8545
metrics:
enabled: true
# If changing port here, make sure to adjust `metrics.serviceMonitor.port`
Expand All @@ -47,8 +47,6 @@ fullnameOverride: ""
serviceAccount:
# Specifies whether a service account should be created
create: true
# Automatically mount a ServiceAccount's API credentials?
automount: true
# Annotations to add to the service account
annotations: {}
# The name of the service account to use.
Expand All @@ -63,18 +61,16 @@ metrics:
podAnnotations: {}
podLabels: {}

podSecurityContext:
{}
# fsGroup: 2000
podSecurityContext: {}
# fsGroup: 2000

securityContext:
{}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000

service:
type: ClusterIP
Expand All @@ -83,32 +79,30 @@ service:
ingress:
enabled: false
className: ""
annotations:
{}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
annotations: {}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
hosts:
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
- host: chart-example.local
paths:
- path: /
pathType: ImplementationSpecific
tls: []
# - secretName: chart-example-tls
# hosts:
# - chart-example.local

resources:
{}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi

autoscaling:
enabled: false
Expand Down

0 comments on commit 2ef03df

Please sign in to comment.