diff --git a/operations/pyroscope/helm/pyroscope/README.md b/operations/pyroscope/helm/pyroscope/README.md index 777c8e44da..9c30a17801 100644 --- a/operations/pyroscope/helm/pyroscope/README.md +++ b/operations/pyroscope/helm/pyroscope/README.md @@ -64,7 +64,6 @@ | pyroscope.podSecurityContext.fsGroup | int | `10001` | | | pyroscope.podSecurityContext.runAsNonRoot | bool | `true` | | | pyroscope.podSecurityContext.runAsUser | int | `10001` | | -| pyroscope.rbac.create | bool | `true` | | | pyroscope.replicaCount | int | `1` | | | pyroscope.resources | object | `{}` | | | pyroscope.securityContext | object | `{}` | | diff --git a/operations/pyroscope/helm/pyroscope/rendered/micro-services-hpa.yaml b/operations/pyroscope/helm/pyroscope/rendered/micro-services-hpa.yaml index 11c43d5c0a..09fd104b2a 100644 --- a/operations/pyroscope/helm/pyroscope/rendered/micro-services-hpa.yaml +++ b/operations/pyroscope/helm/pyroscope/rendered/micro-services-hpa.yaml @@ -1496,36 +1496,6 @@ rules: resources: ["replicasets"] verbs: ["get", "list", "watch"] --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -rules: -- apiGroups: - - "" - - "discovery.k8s.io" - resources: - - pods - - endpoints - verbs: - - list - - get - - watch -- apiGroups: - - "" - resources: - - nodes - verbs: - - get ---- # Source: pyroscope/charts/alloy/templates/rbac.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -1549,27 +1519,6 @@ subjects: name: pyroscope-dev-alloy namespace: default --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: default-pyroscope-dev -subjects: - - kind: ServiceAccount - name: pyroscope-dev - namespace: default ---- # Source: pyroscope/charts/alloy/templates/cluster_service.yaml apiVersion: v1 kind: Service diff --git a/operations/pyroscope/helm/pyroscope/rendered/micro-services.yaml b/operations/pyroscope/helm/pyroscope/rendered/micro-services.yaml index cbd293229a..e18d6193f9 100644 --- a/operations/pyroscope/helm/pyroscope/rendered/micro-services.yaml +++ b/operations/pyroscope/helm/pyroscope/rendered/micro-services.yaml @@ -1538,36 +1538,6 @@ rules: resources: ["replicasets"] verbs: ["get", "list", "watch"] --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -rules: -- apiGroups: - - "" - - "discovery.k8s.io" - resources: - - pods - - endpoints - verbs: - - list - - get - - watch -- apiGroups: - - "" - resources: - - nodes - verbs: - - get ---- # Source: pyroscope/charts/alloy/templates/rbac.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -1591,27 +1561,6 @@ subjects: name: pyroscope-dev-alloy namespace: default --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: default-pyroscope-dev -subjects: - - kind: ServiceAccount - name: pyroscope-dev - namespace: default ---- # Source: pyroscope/charts/alloy/templates/cluster_service.yaml apiVersion: v1 kind: Service diff --git a/operations/pyroscope/helm/pyroscope/rendered/single-binary.yaml b/operations/pyroscope/helm/pyroscope/rendered/single-binary.yaml index 70bf1dd74f..718d622ab5 100644 --- a/operations/pyroscope/helm/pyroscope/rendered/single-binary.yaml +++ b/operations/pyroscope/helm/pyroscope/rendered/single-binary.yaml @@ -1022,36 +1022,6 @@ rules: resources: ["replicasets"] verbs: ["get", "list", "watch"] --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -rules: -- apiGroups: - - "" - - "discovery.k8s.io" - resources: - - pods - - endpoints - verbs: - - list - - get - - watch -- apiGroups: - - "" - resources: - - nodes - verbs: - - get ---- # Source: pyroscope/charts/alloy/templates/rbac.yaml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding @@ -1075,27 +1045,6 @@ subjects: name: pyroscope-dev-alloy namespace: default --- -# Source: pyroscope/templates/rbac.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: default-pyroscope-dev - namespace: default - labels: - helm.sh/chart: pyroscope-1.12.0 - app.kubernetes.io/name: pyroscope - app.kubernetes.io/instance: pyroscope-dev - app.kubernetes.io/version: "1.12.0" - app.kubernetes.io/managed-by: Helm -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: default-pyroscope-dev -subjects: - - kind: ServiceAccount - name: pyroscope-dev - namespace: default ---- # Source: pyroscope/charts/alloy/templates/cluster_service.yaml apiVersion: v1 kind: Service diff --git a/operations/pyroscope/helm/pyroscope/templates/rbac.yaml b/operations/pyroscope/helm/pyroscope/templates/rbac.yaml deleted file mode 100644 index 456ff9c292..0000000000 --- a/operations/pyroscope/helm/pyroscope/templates/rbac.yaml +++ /dev/null @@ -1,43 +0,0 @@ -{{- if .Values.pyroscope.rbac.create -}} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: {{ .Release.Namespace }}-{{ include "pyroscope.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - {{- include "pyroscope.labels" . | nindent 4 }} -rules: -- apiGroups: - - "" - - "discovery.k8s.io" - resources: - - pods - - endpoints - verbs: - - list - - get - - watch -- apiGroups: - - "" - resources: - - nodes - verbs: - - get ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: {{ .Release.Namespace }}-{{ include "pyroscope.fullname" . }} - namespace: {{ .Release.Namespace }} - labels: - {{- include "pyroscope.labels" . | nindent 4 }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: {{ .Release.Namespace }}-{{ include "pyroscope.fullname" . }} -subjects: - - kind: ServiceAccount - name: {{ include "pyroscope.serviceAccountName" . }} - namespace: {{ .Release.Namespace }} -{{- end }} diff --git a/operations/pyroscope/helm/pyroscope/values.yaml b/operations/pyroscope/helm/pyroscope/values.yaml index 1017dcb0bf..a905870d0c 100644 --- a/operations/pyroscope/helm/pyroscope/values.yaml +++ b/operations/pyroscope/helm/pyroscope/values.yaml @@ -34,9 +34,6 @@ pyroscope: nameOverride: "" fullnameOverride: "" - rbac: - create: true - serviceAccount: # Specifies whether a service account should be created create: true diff --git a/operations/pyroscope/jsonnet/values.json b/operations/pyroscope/jsonnet/values.json index 5f9f7ef886..bd590bb355 100644 --- a/operations/pyroscope/jsonnet/values.json +++ b/operations/pyroscope/jsonnet/values.json @@ -129,9 +129,6 @@ "runAsNonRoot": true, "runAsUser": 10001 }, - "rbac": { - "create": true - }, "replicaCount": 1, "resources": {}, "securityContext": {},