[Starlingx-discuss] New Kubernetes namespaces introduced by new applications

[Sun, Yicheng (Jerry)]

Hi All,

If you are introducing a new Kubernetes namespace with a new application, please also deploy the psp-rolebinding helm chart from the helm-charts repo. If this is not deployed, you may encounter deployment issues if the pod security plugin is enabled on the Kubernetes cluster.

To test, enable pod security plugin:
    system service-parameter-add kubernetes kube_apiserver admission_plugins=PodSecurityPolicy
    system service-parameter-apply Kubernetes
and then deploy your application.

Example of how to include the psp-rolebinding helm chart in your application:
https://opendev.org/starlingx/openstack-armada-app/commit/92ed6fecc714e373b98c740a24ae75069d4ccf43
https://opendev.org/starlingx/openstack-armada-app/commit/0cdedf8e447f5be0d74017aba669a5c28393a0e5

Thanks,
Jerry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20200702/5c24c1a3/attachment.html>