Did away with the default service_account requirement. Will enforce

requirement for default sa to have anyuid capability in OCP. k8s
doesn't care.
This commit is contained in:
Kiran Thyagaraja 2018-01-22 02:39:25 +00:00
parent 6ac759f10d
commit 1c38bd645c
6 changed files with 0 additions and 8 deletions

View File

@ -3,7 +3,6 @@
#config_file: "~/.kube/config"
action: provision
namespace: openstack
service_account: openstack
privileged_service_account: openstack-priv
database_password: weakpassword
cinder_db_password: cinderpass

View File

@ -81,7 +81,6 @@
k8s_apps_v1beta1_deployment:
name: cinder-volume-rbd
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
labels:
app: cinder-volume-rbd
service: cinder-volume-rbd

View File

@ -40,7 +40,6 @@
k8s_apps_v1beta1_deployment:
name: cinder-volume-xtremio
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
labels:
app: cinder-volume-xtremio
service: cinder-volume-xtremio

View File

@ -79,7 +79,6 @@
k8s_apps_v1beta1_deployment:
name: cinder-api
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
labels:
app: cinder-api
service: cinder-api

View File

@ -40,7 +40,6 @@
k8s_apps_v1beta1_deployment:
name: cinder-scheduler
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
labels:
app: cinder-scheduler
service: cinder-scheduler

View File

@ -39,7 +39,6 @@
k8s_v1_job:
name: cinder-create-db
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
restart_policy: OnFailure
containers:
- name: cinder-create-db
@ -64,7 +63,6 @@
k8s_v1_job:
name: cinder-create-user
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
restart_policy: OnFailure
containers:
- name: cinder-create-db
@ -96,7 +94,6 @@
k8s_v1_job:
name: cinder-create-tables
namespace: "{{ namespace }}"
service_account_name: "{{ service_account }}"
restart_policy: OnFailure
containers:
- name: cinder-create-db