diff --git a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-deployment.yaml b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-deployment.yaml index 2e90c14..e18906b 100644 --- a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-deployment.yaml +++ b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-deployment.yaml @@ -22,29 +22,6 @@ spec: {{- toYaml . | nindent 8 }} {{- end }} containers: - - args: - - --secure-listen-address=0.0.0.0:8443 - - --upstream=http://127.0.0.1:8080/ - - --logtostderr=true - - --v=0 - image: {{ .Values.kubeProxyImage }} - name: kube-rbac-proxy - ports: - - containerPort: 8443 - name: https - protocol: TCP - resources: - limits: - cpu: 500m - memory: 128Mi - requests: - cpu: 5m - memory: 64Mi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - args: - --health-probe-bind-address=:8081 - --metrics-bind-address=127.0.0.1:8080 diff --git a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-reader-clusterrole.yaml b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-reader-clusterrole.yaml deleted file mode 100644 index 378e8e2..0000000 --- a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-reader-clusterrole.yaml +++ /dev/null @@ -1,12 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: -{{- with (include "embedded-cluster-operator.labels" $ | fromYaml) }} - labels: {{- toYaml . | nindent 4 }} -{{- end }} - name: {{ printf "%s-metrics-reader" (include "embedded-cluster-operator.fullname" $) | trunc 63 | trimAll "-" }} -rules: -- nonResourceURLs: - - /metrics - verbs: - - get diff --git a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-service.yaml b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-service.yaml deleted file mode 100644 index 9b078ca..0000000 --- a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-metrics-service.yaml +++ /dev/null @@ -1,14 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: -{{- with (include "embedded-cluster-operator.labels" $ | fromYaml) }} - labels: {{- toYaml . | nindent 4 }} -{{- end }} - name: {{ printf "%s-metrics" (include "embedded-cluster-operator.fullname" $) | trunc 63 | trimAll "-" }} -spec: - ports: - - name: https - port: 8443 - protocol: TCP - targetPort: https - selector: {{- include "embedded-cluster-operator.selectorLabels" $ | nindent 4 }} diff --git a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-clusterrole.yaml b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-clusterrole.yaml deleted file mode 100644 index 7cfb425..0000000 --- a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-clusterrole.yaml +++ /dev/null @@ -1,20 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: -{{- with (include "embedded-cluster-operator.labels" $ | fromYaml) }} - labels: {{- toYaml . | nindent 4 }} -{{- end }} - name: {{ printf "%s-proxy" (include "embedded-cluster-operator.fullname" $) | trunc 63 | trimAll "-" }} -rules: -- apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create -- apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create diff --git a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-rolebinding.yaml b/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-rolebinding.yaml deleted file mode 100644 index 1b42083..0000000 --- a/charts/embedded-cluster-operator/templates/embedded-cluster-operator-proxy-rolebinding.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: -{{- with (include "embedded-cluster-operator.labels" $ | fromYaml) }} - labels: {{- toYaml . | nindent 4 }} -{{- end }} - name: {{ printf "%s-proxy" (include "embedded-cluster-operator.fullname" $) | trunc 63 | trimAll "-" }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: {{ printf "%s-proxy" (include "embedded-cluster-operator.fullname" $) | trunc 63 | trimAll "-" }} -subjects: -- kind: ServiceAccount - name: {{ include "embedded-cluster-operator.serviceAccountName" $ | trunc 63 | trimAll "-"}} - namespace: {{ .Release.Namespace }} diff --git a/charts/embedded-cluster-operator/values.yaml b/charts/embedded-cluster-operator/values.yaml index 1e734a2..b316a74 100644 --- a/charts/embedded-cluster-operator/values.yaml +++ b/charts/embedded-cluster-operator/values.yaml @@ -13,7 +13,6 @@ image: tag: 0.0.8 pullPolicy: IfNotPresent -kubeProxyImage: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1 utilsImage: busybox:latest extraEnv: [] diff --git a/charts/embedded-cluster-operator/values.yaml.tmpl b/charts/embedded-cluster-operator/values.yaml.tmpl index 94fa2b3..aef2ff4 100644 --- a/charts/embedded-cluster-operator/values.yaml.tmpl +++ b/charts/embedded-cluster-operator/values.yaml.tmpl @@ -12,7 +12,6 @@ image: tag: ${OPERATOR_IMAGE_TAG} pullPolicy: IfNotPresent -kubeProxyImage: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.1 utilsImage: busybox:latest extraEnv: []