mirror of
https://gitea.com/gitea/helm-chart.git
synced 2024-07-07 16:54:12 +02:00
5e5496f15d
### Description of the change This adds a new values object `serviceAccount`, that allows creating a dedicated ServiceAccount with the Helm Release into the cluster. It supports all common options like labels, annotations, name override (or referring to an externally created ServiceAccount), auto-mount token, image pull secrets. It supersedes the stale PR #357. ### Benefits Users can deploy Gitea with more fine-tuned security settings. ### Applicable issues - related to #448 ### Additional information I've bumped the helm-unittest plugin in the CI build, to be able to use the `exists` and `notExists` feature in the new tests. ### Checklist - [x] Parameters are documented in the `values.yaml` and added to the `README.md` using [readme-generator-for-helm](https://github.com/bitnami-labs/readme-generator-for-helm) Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/451 Reviewed-by: pat-s <pat-s@noreply.gitea.com> Co-authored-by: justusbunsi <sk.bunsenbrenner@gmail.com> Co-committed-by: justusbunsi <sk.bunsenbrenner@gmail.com>
33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
suite: ServiceAccount template (reference)
|
|
release:
|
|
name: gitea-unittests
|
|
namespace: testing
|
|
templates:
|
|
- templates/gitea/serviceaccount.yaml
|
|
- templates/gitea/statefulset.yaml
|
|
- templates/gitea/config.yaml
|
|
tests:
|
|
- it: does not modify the StatefulSet by default
|
|
template: templates/gitea/statefulset.yaml
|
|
asserts:
|
|
- notExists:
|
|
path: spec.serviceAccountName
|
|
- it: adds the reference to the StatefulSet with serviceAccount.create=true
|
|
template: templates/gitea/statefulset.yaml
|
|
set:
|
|
serviceAccount.create: true
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.serviceAccountName
|
|
value: gitea-unittests
|
|
- it: allows referencing an externally created ServiceAccount to the StatefulSet
|
|
template: templates/gitea/statefulset.yaml
|
|
set:
|
|
serviceAccount:
|
|
create: false # explicitly set to define rendering behavior
|
|
name: "externally-existing-serviceaccount"
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.serviceAccountName
|
|
value: externally-existing-serviceaccount
|