mirror of
https://gitea.com/gitea/helm-chart.git
synced 2024-07-02 22:40:36 +02:00
5e5496f15d
### Description of the change This adds a new values object `serviceAccount`, that allows creating a dedicated ServiceAccount with the Helm Release into the cluster. It supports all common options like labels, annotations, name override (or referring to an externally created ServiceAccount), auto-mount token, image pull secrets. It supersedes the stale PR #357. ### Benefits Users can deploy Gitea with more fine-tuned security settings. ### Applicable issues - related to #448 ### Additional information I've bumped the helm-unittest plugin in the CI build, to be able to use the `exists` and `notExists` feature in the new tests. ### Checklist - [x] Parameters are documented in the `values.yaml` and added to the `README.md` using [readme-generator-for-helm](https://github.com/bitnami-labs/readme-generator-for-helm) Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/451 Reviewed-by: pat-s <pat-s@noreply.gitea.com> Co-authored-by: justusbunsi <sk.bunsenbrenner@gmail.com> Co-committed-by: justusbunsi <sk.bunsenbrenner@gmail.com>
83 lines
2.1 KiB
YAML
83 lines
2.1 KiB
YAML
suite: ServiceAccount template (basic)
|
|
release:
|
|
name: gitea-unittests
|
|
namespace: testing
|
|
templates:
|
|
- templates/gitea/serviceaccount.yaml
|
|
tests:
|
|
- it: skips rendering by default
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
- it: renders default ServiceAccount object with serviceAccount.create=true
|
|
set:
|
|
serviceAccount.create: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- containsDocument:
|
|
kind: ServiceAccount
|
|
apiVersion: v1
|
|
name: gitea-unittests
|
|
- equal:
|
|
path: automountServiceAccountToken
|
|
value: false
|
|
- notExists:
|
|
path: imagePullSecrets
|
|
- notExists:
|
|
path: metadata.annotations
|
|
- it: allows for adding custom labels
|
|
set:
|
|
serviceAccount:
|
|
create: true
|
|
labels:
|
|
custom: label
|
|
asserts:
|
|
- equal:
|
|
path: metadata.labels.custom
|
|
value: label
|
|
- it: allows for adding custom annotations
|
|
set:
|
|
serviceAccount:
|
|
create: true
|
|
annotations:
|
|
myCustom: annotation
|
|
asserts:
|
|
- equal:
|
|
path: metadata.annotations.myCustom
|
|
value: annotation
|
|
- it: allows to override the generated name
|
|
set:
|
|
serviceAccount:
|
|
create: true
|
|
name: provided-serviceaccount-name
|
|
asserts:
|
|
- equal:
|
|
path: metadata.name
|
|
value: provided-serviceaccount-name
|
|
- it: allows to mount the token
|
|
set:
|
|
serviceAccount:
|
|
create: true
|
|
automountServiceAccountToken: true
|
|
asserts:
|
|
- equal:
|
|
path: automountServiceAccountToken
|
|
value: true
|
|
- it: allows to reference image pull secrets
|
|
set:
|
|
serviceAccount:
|
|
create: true
|
|
imagePullSecrets:
|
|
- name: testing-image-pull-secret
|
|
- name: another-pull-secret
|
|
asserts:
|
|
- contains:
|
|
path: imagePullSecrets
|
|
content:
|
|
name: testing-image-pull-secret
|
|
- contains:
|
|
path: imagePullSecrets
|
|
content:
|
|
name: another-pull-secret
|