fix: update service accounts in app-template charts

Signed-off-by: Devin Buhl <[email protected]>
onedr0p · Jan 3, 2024 · fef59b2 · fef59b2
1 parent bcc13c3
commit fef59b2
Show file tree

Hide file tree

Showing 7 changed files with 10 additions and 86 deletions.
diff --git a/kubernetes/main/apps/observability/gatus/app/rbac.yaml b/kubernetes/main/apps/observability/gatus/app/rbac.yaml
@@ -1,37 +1,8 @@
 ---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: gatus
-  labels:
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    meta.helm.sh/release-name: gatus
-    meta.helm.sh/release-namespace: observability
-secrets:
-  - name: gatus
----
-apiVersion: v1
-kind: Secret
-type: kubernetes.io/service-account-token
-metadata:
-  name: gatus
-  labels:
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    meta.helm.sh/release-name: gatus
-    meta.helm.sh/release-namespace: observability
-    kubernetes.io/service-account.name: gatus
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: gatus
-  labels:
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    meta.helm.sh/release-name: gatus
-    meta.helm.sh/release-namespace: observability
 rules:
   - apiGroups: [""]
     resources: ["configmaps", "secrets"]
@@ -41,11 +12,6 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: gatus
-  labels:
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    meta.helm.sh/release-name: gatus
-    meta.helm.sh/release-namespace: observability
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/kubernetes/main/apps/observability/vector/app/agent/rbac.yaml b/kubernetes/main/apps/observability/vector/app/agent/rbac.yaml
@@ -4,15 +4,9 @@ kind: ClusterRole
 metadata:
   name: vector-agent
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - namespaces
-      - nodes
-      - pods
-    verbs:
-      - list
-      - watch
+  - apiGroups: [""]
+    resources: ["namespaces", "nodes", "pods"]
+    verbs: ["list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/kubernetes/main/apps/tools/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/main/apps/tools/system-upgrade-controller/app/helmrelease.yaml
@@ -71,6 +71,7 @@ spec:
             - {key: node-role.kubernetes.io/control-plane, operator: Exists, effect: NoSchedule}
             - {key: node-role.kubernetes.io/etcd, operator: Exists, effect: NoExecute}
     serviceAccount:
+      create: true
       name: system-upgrade
     service:
       main:

diff --git a/kubernetes/main/apps/tools/system-upgrade-controller/app/rbac.yaml b/kubernetes/main/apps/tools/system-upgrade-controller/app/rbac.yaml
@@ -1,23 +1,7 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: system-upgrade
-secrets:
-  - name: system-upgrade
----
-apiVersion: v1
-kind: Secret
-type: kubernetes.io/service-account-token
-metadata:
-  name: system-upgrade
-  annotations:
-    kubernetes.io/service-account.name: system-upgrade
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name:  system-upgrade
+  name: system-upgrade
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole

diff --git a/kubernetes/storage/apps/observability/vector/app/agent/rbac.yaml b/kubernetes/storage/apps/observability/vector/app/agent/rbac.yaml
@@ -4,15 +4,9 @@ kind: ClusterRole
 metadata:
   name: vector-agent
 rules:
-  - apiGroups:
-      - ""
-    resources:
-      - namespaces
-      - nodes
-      - pods
-    verbs:
-      - list
-      - watch
+  - apiGroups: [""]
+    resources: ["namespaces", "nodes", "pods"]
+    verbs: ["list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

diff --git a/kubernetes/storage/apps/tools/system-upgrade-controller/app/helmrelease.yaml b/kubernetes/storage/apps/tools/system-upgrade-controller/app/helmrelease.yaml
@@ -71,6 +71,7 @@ spec:
             - {key: node-role.kubernetes.io/control-plane, operator: Exists, effect: NoSchedule}
             - {key: node-role.kubernetes.io/etcd, operator: Exists, effect: NoExecute}
     serviceAccount:
+      create: true
       name: system-upgrade
     service:
       main:

diff --git a/kubernetes/storage/apps/tools/system-upgrade-controller/app/rbac.yaml b/kubernetes/storage/apps/tools/system-upgrade-controller/app/rbac.yaml
@@ -1,23 +1,7 @@
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: system-upgrade
-secrets:
-  - name: system-upgrade
----
-apiVersion: v1
-kind: Secret
-type: kubernetes.io/service-account-token
-metadata:
-  name: system-upgrade
-  annotations:
-    kubernetes.io/service-account.name: system-upgrade
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name:  system-upgrade
+  name: system-upgrade
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole