Commit ffc59405 authored by Murali Paluru's avatar Murali Paluru Committed by Alena Prokharchyk
Browse files

remove TODOs

parent 0bc68db8

charts/rancher-cis-benchmark/v0.0.1/templates/rbac.yaml

+0 −10
Original line number Original line Diff line number Diff line
@@ -6,8 +6,6 @@ metadata: 
    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

  # TODO: make the sa name configurable

  # name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount

  name: s-sa-{{ .Release.Name }}

  name: s-sa-{{ .Release.Name }}

---

---

apiVersion: rbac.authorization.k8s.io/v1beta1

apiVersion: rbac.authorization.k8s.io/v1beta1
@@ -18,8 +16,6 @@ metadata: 
    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

  # TODO: make the sa name configurable

  # name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount

  name: s-sa-{{ .Release.Name }}

  name: s-sa-{{ .Release.Name }}

rules:

rules:

- apiGroups:

- apiGroups:
@@ -37,18 +33,12 @@ metadata: 
    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    helm.sh/chart: {{ include "rancher-cis-benchmark.chart" . }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/instance: {{ .Release.Name }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

    app.kubernetes.io/managed-by: {{ .Release.Service }}

  # TODO: make the sa name configurable

  # name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount

  name: s-sa-{{ .Release.Name }}

  name: s-sa-{{ .Release.Name }}

roleRef:

roleRef:

  apiGroup: rbac.authorization.k8s.io

  apiGroup: rbac.authorization.k8s.io

  kind: ClusterRole

  kind: ClusterRole

  # TODO: make the sa name configurable

  # name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount

  name: s-sa-{{ .Release.Name }}

  name: s-sa-{{ .Release.Name }}

subjects:

subjects:

- kind: ServiceAccount

- kind: ServiceAccount

  # TODO: make the sa name configurable

  # name: {{ include "rancher-cis-benchmark.fullname" . }}-serviceaccount

  name: s-sa-{{ .Release.Name }}

  name: s-sa-{{ .Release.Name }}

  namespace: {{ .Release.Namespace }}
 
  namespace: {{ .Release.Namespace }}