init infras

2026-06-05 02:27:28 +08:00 · 2022-11-01 14:34:57 +08:00
parent b57a8e141c
commit 1d9c2dec62
71 changed files with 14636 additions and 0 deletions
--- a/helm/base/templates/reader-serviceaccount.yaml
+++ b/helm/base/templates/reader-serviceaccount.yaml
@@ -0,0 +1,16 @@
+# This service account aggregates reader permissions for the revisions in a given cluster
+# Should be used for remote secret creation.
+apiVersion: v1
+kind: ServiceAccount
+  {{- if .Values.global.imagePullSecrets }}
+imagePullSecrets:
+  {{- range .Values.global.imagePullSecrets }}
+  - name: {{ . }}
+    {{- end }}
+    {{- end }}
+metadata:
+  name: istio-reader-service-account
+  namespace: {{ .Values.global.istioNamespace }}
+  labels:
+    app: istio-reader
+    release: {{ .Release.Name }}