Skip to content

Commit

Permalink
add kustomize support for v4.0
Browse files Browse the repository at this point in the history
  • Loading branch information
Praveenrajmani committed Oct 17, 2024
1 parent 35aaf55 commit 2d61557
Show file tree
Hide file tree
Showing 7 changed files with 98 additions and 0 deletions.
10 changes: 10 additions & 0 deletions resources/v4.0/base/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- ../../base
- ../psp

images:
- name: quay.io/minio/directpv
digest: sha256:98c23183f3abb8d9b6e0c300677605cc822e039fc81ce0e5dd8bef1006547627
10 changes: 10 additions & 0 deletions resources/v4.0/legacy/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- ../../legacy
- ../psp

images:
- name: quay.io/minio/directpv
digest: sha256:98c23183f3abb8d9b6e0c300677605cc822e039fc81ce0e5dd8bef1006547627
10 changes: 10 additions & 0 deletions resources/v4.0/openshift-with-legacy/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- ../../openshift-with-legacy
- ../psp

images:
- name: quay.io/minio/directpv
digest: sha256:98c23183f3abb8d9b6e0c300677605cc822e039fc81ce0e5dd8bef1006547627
10 changes: 10 additions & 0 deletions resources/v4.0/openshift/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- ../../openshift
- ../psp

images:
- name: quay.io/minio/directpv
digest: sha256:98c23183f3abb8d9b6e0c300677605cc822e039fc81ce0e5dd8bef1006547627
18 changes: 18 additions & 0 deletions resources/v4.0/psp/PodSecurityPolicy-ClusterRoleBinding.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
creationTimestamp: null
labels:
application-name: directpv.min.io
application-type: CSIDriver
directpv.min.io/created-by: kubectl-directpv
directpv.min.io/version: v1beta1
name: psp-directpv-min-io
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: directpv-min-io
subjects:
- apiGroup: rbac.authorization.k8s.io
kind: Group
name: system:serviceaccounts:directpv-min-io
34 changes: 34 additions & 0 deletions resources/v4.0/psp/PodSecurityPolicy.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
creationTimestamp: null
labels:
application-name: directpv.min.io
application-type: CSIDriver
directpv.min.io/created-by: kubectl-directpv
directpv.min.io/version: v1beta1
name: directpv-min-io
spec:
allowedCapabilities:
- '*'
allowedHostPaths:
- pathPrefix: /proc
readOnly: true
- pathPrefix: /sys
- pathPrefix: /run/udev/data
readOnly: true
- pathPrefix: /var/lib/directpv
- pathPrefix: /csi
- pathPrefix: /var/lib/kubelet
fsGroup:
rule: RunAsAny
hostPID: true
privileged: true
runAsUser:
rule: RunAsAny
seLinux:
rule: RunAsAny
supplementalGroups:
rule: RunAsAny
volumes:
- hostPath
6 changes: 6 additions & 0 deletions resources/v4.0/psp/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- PodSecurityPolicy.yaml
- PodSecurityPolicy-ClusterRoleBinding.yaml

0 comments on commit 2d61557

Please sign in to comment.