fix(core): add kube-rbac-proxy to cdi-operator (#530)

Signed-off-by: Maksim Fedotov <[email protected]>
deckhouse · Nov 20, 2024 · 8b37ef1 · 8b37ef1
1 parent 1737593
commit 8b37ef1
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/templates/cdi/cdi-operator/deployment.yaml b/templates/cdi/cdi-operator/deployment.yaml
@@ -82,11 +82,12 @@ spec:
       {{- include "helm_lib_pod_anti_affinity_for_ha" (list . (dict "app" "cdi-operator")) | nindent 6 }}
       containers:
       {{- include "kube_api_rewriter.sidecar_container" . | nindent 6 }}
-        {{- $kubeRbacProxySettings := dict }}
-        {{- $_ := set $kubeRbacProxySettings "runAsUserNobody" true }}
-        {{- $_ := set $kubeRbacProxySettings "upstreams" (list
-            (dict "upstream" "http://127.0.0.1:9090/metrics" "path" "/proxy/metrics" "name" "kube-api-rewriter") 
-        ) }}
+      {{- $kubeRbacProxySettings := dict }}
+      {{- $_ := set $kubeRbacProxySettings "runAsUserNobody" true }}
+      {{- $_ := set $kubeRbacProxySettings "upstreams" (list
+          (dict "upstream" "http://127.0.0.1:9090/metrics" "path" "/proxy/metrics" "name" "kube-api-rewriter") 
+      ) }}
+      {{- include "kube_rbac_proxy.sidecar_container" (tuple . $kubeRbacProxySettings) | nindent 6 }}
       - name: cdi-operator
         {{- include "helm_lib_module_container_security_context_read_only_root_filesystem_capabilities_drop_all" . | nindent 8 }}
         env: