feat: enable psps by default when possible

particuleio · Aug 5, 2019 · d9249f1 · d9249f1
1 parent d27eb4a
commit d9249f1
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 2 deletions.
diff --git a/terraform/modules/eks-addons/external-dns.tf b/terraform/modules/eks-addons/external-dns.tf
@@ -5,7 +5,8 @@ image:
 provider: aws
 txtPrefix: "ext-dns-"
 rbac:
- create: true
+  create: true
+  pspEnabled: true
 nodeSelector:
   node-role.kubernetes.io/controller: ""
 tolerations:

diff --git a/terraform/modules/eks-addons/flux.tf b/terraform/modules/eks-addons/flux.tf
@@ -4,6 +4,7 @@ image:
   tag: ${var.flux["version"]}
 rbac:
   create: true
+  pspEnabled: true
 helmOperator:
   create: true
 additionalArgs:

diff --git a/terraform/modules/eks-addons/kiam.tf b/terraform/modules/eks-addons/kiam.tf
@@ -1,7 +1,7 @@
 locals {
   values_kiam = <<VALUES
 psp:
-  create: false
+  create: true
 agent:
   image:
     tag: ${var.kiam["version"]}

diff --git a/terraform/modules/eks-addons/node-problem-detector.tf b/terraform/modules/eks-addons/node-problem-detector.tf
@@ -1,5 +1,7 @@
 locals {
   values_npd = <<VALUES
+rbac:
+  pspEnabled: true
 image:
   tag: ${var.npd["version"]}
 affinity:

diff --git a/terraform/modules/eks-addons/sealed-secrets.tf b/terraform/modules/eks-addons/sealed-secrets.tf
@@ -1,5 +1,7 @@
 locals {
   values_sealed_secrets = <<VALUES
+rbac:
+  pspEnabled: true
 image:
   tag: ${var.sealed_secrets["version"]}
 VALUES