Skip to content

Commit 44b8c70

Browse files
committed
fix(core): add kube-rbac-proxy to cdi-operator
Signed-off-by: Maksim Fedotov <[email protected]>
1 parent 1737593 commit 44b8c70

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

templates/cdi/cdi-operator/deployment.yaml

+6-5
Original file line numberDiff line numberDiff line change
@@ -82,11 +82,12 @@ spec:
8282
{{- include "helm_lib_pod_anti_affinity_for_ha" (list . (dict "app" "cdi-operator")) | nindent 6 }}
8383
containers:
8484
{{- include "kube_api_rewriter.sidecar_container" . | nindent 6 }}
85-
{{- $kubeRbacProxySettings := dict }}
86-
{{- $_ := set $kubeRbacProxySettings "runAsUserNobody" true }}
87-
{{- $_ := set $kubeRbacProxySettings "upstreams" (list
88-
(dict "upstream" "http://127.0.0.1:9090/metrics" "path" "/proxy/metrics" "name" "kube-api-rewriter")
89-
) }}
85+
{{- $kubeRbacProxySettings := dict }}
86+
{{- $_ := set $kubeRbacProxySettings "runAsUserNobody" true }}
87+
{{- $_ := set $kubeRbacProxySettings "upstreams" (list
88+
(dict "upstream" "http://127.0.0.1:9090/metrics" "path" "/proxy/metrics" "name" "kube-api-rewriter")
89+
) }}
90+
{{- include "kube_rbac_proxy.sidecar_container" (tuple . $kubeRbacProxySettings) | nindent 6 }}
9091
- name: cdi-operator
9192
{{- include "helm_lib_module_container_security_context_read_only_root_filesystem_capabilities_drop_all" . | nindent 8 }}
9293
env:

0 commit comments

Comments
 (0)