Add service account to requirements, values and deployment/statefulset
Issue-ID: OOM-2862
Signed-off-by: farida azmy <farida.azmy.ext@orange.com>
Change-Id: Ia20fb51256e20e6582a2b9e0d89159742992fea4
24 files changed:
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.rabbitmq }}
imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
name: rabbit-mq
- image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.rabbitmq }}
imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
name: rabbit-mq
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: fcaps-log
emptyDir: {}
volumes:
- name: fcaps-log
emptyDir: {}
# rabbit-mq image resource
rabbitmq: rabbitmq:alpine
# rabbit-mq image resource
rabbitmq: rabbitmq:alpine
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-fcaps
+ roles:
+ - read
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
subPath: config.json
- mountPath: /data
name: artifact-data
subPath: config.json
- mountPath: /data
name: artifact-data
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: localtime
hostPath:
volumes:
- name: localtime
hostPath:
cpu: 10m
memory: 100Mi
unlimited: {}
cpu: 10m
memory: 100Mi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-k8s
+ roles:
+ - read
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
name: pike-log
- mountPath: /usr/share/filebeat/data
name: pike-data-filebeat
name: pike-log
- mountPath: /usr/share/filebeat/data
name: pike-data-filebeat
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: pike-log
emptyDir: {}
volumes:
- name: pike-log
emptyDir: {}
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-pike
+ roles:
+ - read
- name: prometheus-grafana
version: ~9.x-0
repository: 'file://components/prometheus-grafana'
- name: prometheus-grafana
version: ~9.x-0
repository: 'file://components/prometheus-grafana'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
affinity:
{{ toYaml .Values.affinity | indent 8 }}
{{- end }}
affinity:
{{ toYaml .Values.affinity | indent 8 }}
{{- end }}
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: {{ include "common.fullname" . }}-config
configMap:
volumes:
- name: {{ include "common.fullname" . }}-config
configMap:
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-prometheus
+ roles:
+ - read
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
subPath: config.json
- mountPath: /data
name: artifact-data
subPath: config.json
- mountPath: /data
name: artifact-data
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: starlingx-log
emptyDir: {}
volumes:
- name: starlingx-log
emptyDir: {}
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-starlingx
+ roles:
+ - read
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
name: vio-log
- mountPath: /usr/share/filebeat/data
name: vio-data-filebeat
name: vio-log
- mountPath: /usr/share/filebeat/data
name: vio-data-filebeat
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: vio-log
emptyDir: {}
volumes:
- name: vio-log
emptyDir: {}
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-vio
+ roles:
+ - read
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
- name: repositoryGenerator
version: ~9.x-0
repository: '@local'
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
subPath: config.json
- mountPath: /data
name: artifact-data
subPath: config.json
- mountPath: /data
name: artifact-data
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: windriver-log
emptyDir: {}
volumes:
- name: windriver-log
emptyDir: {}
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud-windriver
+ roles:
+ - read
version: ~9.x-0
repository: 'file://components/multicloud-windriver'
condition: multicloud-windriver.enabled
version: ~9.x-0
repository: 'file://components/multicloud-windriver'
condition: multicloud-windriver.enabled
+ - name: serviceAccount
+ version: ~9.x-0
+ repository: '@local'
name: framework-log
- mountPath: /usr/share/filebeat/data
name: framework-data-filebeat
name: framework-log
- mountPath: /usr/share/filebeat/data
name: framework-data-filebeat
+ serviceAccountName: {{ include "common.fullname" (dict "suffix" "read" "dot" . )}}
volumes:
- name: framework-log
emptyDir: {}
volumes:
- name: framework-log
emptyDir: {}
cpu: 20m
memory: 2Gi
unlimited: {}
cpu: 20m
memory: 2Gi
unlimited: {}
+
+#Pods Service Account
+serviceAccount:
+ nameOverride: multicloud
+ roles:
+ - read