Commit graph

6 commits

Author SHA1 Message Date
Michael
e61f97f8ac
Add RBAC to helm chart (#1373)
This PR fixes #1367 with the minimum needed (plus the basics of
annotations and labels, since some clusters need those for extra
verifications, OPA, Kyverno, etc.).

The added role is the minimum access I could get away with (tested each
verb and resource individually), since the Kubernetes go library seems
to use list and get even when not strictly necessary.

I've defaulted to inactive, setting the serviceAccount.rbac.create=true
will create the Role and roleBinding.

The changes only affect the woodpecker-agent chart, as the
woodpecker-server chart currently does nothing directly

# Tests

- [x] non default namespace (roleBindung uses namespace in a not
automatically rewritten position)
- [x] rbac.create enabled and disabled (nothing changes for disabled,
since the templates use a guard)
- [x] custom serviceAccount name
- [x] both roleBinding and role with no annotations, no lables, single
a&l, multiple each
- [x] helm deploy to Kubernetes, with all settings mentioned above

# Documentation

Added in the comments of the values.yaml. Taking it into the docs might
be helpful, but the Kubernetes section in the next docs is fairly empty,
possibly open a new issue and solve when the chart for next is mostly
done.
2022-10-30 22:47:58 +01:00
Anbraten
3b0263442a
Adding initial version of Kubernetes backend (#552)
Co-authored-by: laszlocph <laszlo@laszlo.cloud>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Rynoxx <rynoxx@grid-servers.net>
2022-09-05 06:01:14 +02:00
Florian Piesche
dbd048c5e9
Allow specifying dind container in values (#750)
This allows:

- resource spec for the dind container different from the main agent
- environment variables for the dind container can also be specified in values, e.g. to change the default driver if one so wishes
- crucially: specifying a different dind image
2022-02-06 16:39:51 +01:00
Nils
5dc9de870b
bump dind image to 20.x, to raise underlying gRPC compat from 1.40 to 1.41 (#627) 2021-12-19 14:03:56 +01:00
Florian Piesche
5d6b8f4b12
[Charts] Add option to pass in topology pod constraints (#262) 2021-08-11 17:36:39 +02:00
Rauny Brandão
d6106dd43e add chart for installing woodpecker server and agent 2021-05-15 14:02:51 -03:00