Skip to content

Commit ed760b8

Browse files
jichenjck8s-ci-robot
authored andcommitted
fix webhook manifests (#866)
the current manifest is not align with doc and example, update this and later patch will update doc accordingly.
1 parent 3a01e4f commit ed760b8

File tree

2 files changed

+6
-4
lines changed

2 files changed

+6
-4
lines changed

manifests/webhook/k8s-keystone-auth-ds.yaml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ spec:
1616
labels:
1717
k8s-app: k8s-keystone-auth
1818
spec:
19+
serviceAccountName: k8s-keystone
1920
hostNetwork: true
2021
nodeSelector:
2122
node-role.kubernetes.io/master: ""
@@ -35,8 +36,8 @@ spec:
3536
- /etc/kubernetes/pki/apiserver.crt
3637
- --tls-private-key-file
3738
- /etc/kubernetes/pki/apiserver.key
38-
- --keystone-policy-file
39-
- /etc/kubernetes/webhook/policy.json
39+
- --policy-configmap-name
40+
- k8s-auth-policy
4041
- --keystone-url=http://ctl:5000/v3
4142
volumeMounts:
4243
- mountPath: /etc/kubernetes/pki

manifests/webhook/k8s-keystone-auth-pod.yaml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ metadata:
99
name: k8s-keystone-auth
1010
namespace: kube-system
1111
spec:
12+
serviceAccountName: k8s-keystone
1213
containers:
1314
- name: k8s-keystone-auth
1415
image: docker.io/k8scloudprovider/k8s-keystone-auth:latest
@@ -19,8 +20,8 @@ spec:
1920
- /etc/kubernetes/pki/apiserver.crt
2021
- --tls-private-key-file
2122
- /etc/kubernetes/pki/apiserver.key
22-
- --keystone-policy-file
23-
- /etc/kubernetes/webhook/policy.json
23+
- --policy-configmap-name
24+
- k8s-auth-policy
2425
- --keystone-url=http://ctl:5000/v3
2526
volumeMounts:
2627
- mountPath: /etc/kubernetes/pki

0 commit comments

Comments
 (0)