Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Leverage Helm values in templates #251

Merged
merged 4 commits into from
Oct 19, 2023
Merged

Conversation

yaraskm
Copy link
Contributor

@yaraskm yaraskm commented Feb 28, 2023

  • A number of variables exist in values.yaml that are not leveraged at all in the deployment templates, such as:

    • Resources
    • Service Account
    • Affinity
    • Tolerations
    • Security Context
  • Updated the templates to leverage values that were already possible, as well as adding support for image.version

@klauspost klauspost requested a review from harshavardhana March 2, 2023 14:03
- A number of variables exist in values.yaml that are not leveraged at
all in the deployment templates, such as:
    - Resources
    - Service Account
    - Affinity
    - Tolerations
    - Security Context

- Updated the templates to leverage values that were already possible,
as well as adding support for image.version
- Passing the access and secret keys directly as environment variables
can inadvertently leak them in a multitenant system, as anyone with the
`view` ClusterRole or higher on the namespace will have the ability to
read the spec of the `Job`.

- Instead, create a secret with the keys and mount them as environment
variables from there.
@klauspost klauspost merged commit 9449191 into minio:master Oct 19, 2023
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants