@@ -625,6 +625,25 @@ serviceAccount:
625625 annotations : {}
626626 name : " "
627627 automountServiceAccountToken : false
628+ # # Role Based Access
629+ # # ref: https://kubernetes.io/docs/admin/authorization/rbac/
630+ # #
631+ rbac :
632+ # # @param rbac.create Specifies whether RBAC resources should be created
633+ # #
634+ create : true
635+ # # @param rbac.rules Custom RBAC rules to set
636+ # # e.g:
637+ # # rules:
638+ # # - apiGroups:
639+ # # - ""
640+ # # resources:
641+ # # - pods
642+ # # verbs:
643+ # # - get
644+ # # - list
645+ # #
646+ rules : []
628647# # @param hostAliases [array] Add deployment host aliases
629648# # https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
630649# #
@@ -1504,7 +1523,7 @@ worker:
15041523 readOnlyPersistence : false
15051524 # # @param worker.automountServiceAccountToken Mount Service Account token in pod
15061525 # #
1507- automountServiceAccountToken : false
1526+ automountServiceAccountToken : true
15081527 # # @param worker.affinity Affinity for worker pod assignment
15091528 # # Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
15101529 # # Note: podAffinityPreset, podAntiAffinityPreset, and nodeAffinityPreset will be ignored when it's set
@@ -1627,3 +1646,96 @@ worker:
16271646 # # command: ['sh', '-c', 'echo "init"']
16281647 # #
16291648 initContainers : []
1649+ # # Init containers parameters:
1650+ # # wait-for-backend: Wait for NetBox backend before running workers
1651+ # #
1652+ waitForBackend :
1653+ # # @param waitForBackend.enabled Wait for NetBox backend before running workers
1654+ # #
1655+ enabled : true
1656+ # # @param waitForBackend.image.registry [default: REGISTRY_NAME] Init container wait-for-backend image registry
1657+ # # @param waitForBackend.image.repository [default: REPOSITORY_NAME/kubectl] Init container wait-for-backend image name
1658+ # # @param waitForBackend.image.tag Init container wait-for-backend image tag
1659+ # # @param waitForBackend.image.digest Init container wait-for-backend image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
1660+ # # @param waitForBackend.image.pullPolicy Init container wait-for-backend image pull policy
1661+ # # @param waitForBackend.image.pullSecrets Specify docker-registry secret names as an array
1662+ # #
1663+ image :
1664+ registry : docker.io
1665+ repository : bitnami/kubectl
1666+ tag : 1.32.2-debian-12-r3
1667+ digest : " "
1668+ # # Specify a imagePullPolicy
1669+ # # ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
1670+ # #
1671+ pullPolicy : IfNotPresent
1672+ # # Optionally specify an array of imagePullSecrets (secrets must be manually created in the namespace)
1673+ # # ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
1674+ # # Example:
1675+ # # pullSecrets:
1676+ # # - myRegistryKeySecretName
1677+ # #
1678+ pullSecrets : []
1679+ # # @param waitForBackend.command The command to execute in the wait-for-backend container
1680+ # #
1681+ command :
1682+ - /bin/bash
1683+ - -ec
1684+ # # @param waitForBackend.args Override wait-for-backend container args
1685+ # #
1686+ args :
1687+ - |
1688+ deployment=${DEPLOYMENT_NAME:?deployment name is missing}
1689+ return_code=0
1690+
1691+ echo "Waiting for deployment \"${deployment}\" to be successfully rolled out..."
1692+ kubectl rollout status deployment "$deployment" 2>&1 || return_code=$?
1693+ echo "Rollout exit code: '${return_code}'"
1694+ exit $return_code
1695+ # # waitForBackend containers' Security Context (init container).
1696+ # # ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
1697+ # # @param waitForBackend.containerSecurityContext.enabled Enabled containers' Security Context
1698+ # # @param waitForBackend.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
1699+ # # @param waitForBackend.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
1700+ # # @param waitForBackend.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
1701+ # # @param waitForBackend.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
1702+ # # @param waitForBackend.containerSecurityContext.privileged Set container's Security Context privileged
1703+ # # @param waitForBackend.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
1704+ # # @param waitForBackend.containerSecurityContext.allowPrivilegeEscalation Set container's Security Context allowPrivilegeEscalation
1705+ # # @param waitForBackend.containerSecurityContext.capabilities.drop List of capabilities to be dropped
1706+ # # @param waitForBackend.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
1707+ # #
1708+ containerSecurityContext :
1709+ enabled : true
1710+ seLinuxOptions : {}
1711+ runAsUser : 1001
1712+ runAsGroup : 1001
1713+ runAsNonRoot : true
1714+ privileged : false
1715+ readOnlyRootFilesystem : true
1716+ allowPrivilegeEscalation : false
1717+ capabilities :
1718+ drop : ["ALL"]
1719+ seccompProfile :
1720+ type : " RuntimeDefault"
1721+ # # Init container resource requests and limits.
1722+ # # ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
1723+ # # We usually recommend not to specify default resources and to leave this as a conscious
1724+ # # choice for the user. This also increases chances charts run on environments with little
1725+ # # resources, such as Minikube. If you do want to specify resources, uncomment the following
1726+ # # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
1727+ # # @param waitForBackend.resourcesPreset Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if waitForBackend.resources is set (waitForBackend.resources is recommended for production).
1728+ # # More information: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_resources.tpl#L15
1729+ # #
1730+ resourcesPreset : " nano"
1731+ # # @param waitForBackend.resources Set container requests and limits for different resources like CPU or memory (essential for production workloads)
1732+ # # Example:
1733+ # # resources:
1734+ # # requests:
1735+ # # cpu: 2
1736+ # # memory: 512Mi
1737+ # # limits:
1738+ # # cpu: 3
1739+ # # memory: 1024Mi
1740+ # #
1741+ resources : {}
0 commit comments