diff --git a/charts/kyverno-notation-aws/templates/deployment.yaml b/charts/kyverno-notation-aws/templates/deployment.yaml index be5bbd8..4735818 100644 --- a/charts/kyverno-notation-aws/templates/deployment.yaml +++ b/charts/kyverno-notation-aws/templates/deployment.yaml @@ -61,7 +61,7 @@ spec: - name: POD_NAMESPACE valueFrom: fieldRef: - fieldPath: metadata.namespace + fieldPath: metadata.namespace - name: SERVICE_NAME value: {{ template "kyverno-notation-aws.serviceName" . }} - name: DEPLOYMENT_NAME @@ -71,7 +71,7 @@ spec: fieldRef: fieldPath: metadata.name - name: AWS_REGION - value: us-west-2 + value: {{ .Values.region }} - name: DEFAULT_TRUST_POLICY value: aws-signer-trust-policy volumeMounts: diff --git a/charts/kyverno-notation-aws/templates/serviceaccount.yaml b/charts/kyverno-notation-aws/templates/serviceaccount.yaml index dcbc096..ab48353 100644 --- a/charts/kyverno-notation-aws/templates/serviceaccount.yaml +++ b/charts/kyverno-notation-aws/templates/serviceaccount.yaml @@ -1,3 +1,4 @@ +{{- if .Values.serviceAccount.enabled }} apiVersion: v1 kind: ServiceAccount metadata: @@ -7,3 +8,4 @@ metadata: annotations: {{- toYaml . | nindent 4 }} {{- end }} +{{- end -}} diff --git a/charts/kyverno-notation-aws/values.yaml b/charts/kyverno-notation-aws/values.yaml index 9a7b7bc..a1701cc 100644 --- a/charts/kyverno-notation-aws/values.yaml +++ b/charts/kyverno-notation-aws/values.yaml @@ -1,3 +1,5 @@ +region: us-west-2 + # -- (string) Override the name of the chart nameOverride: ~ @@ -39,16 +41,16 @@ deployment: # registry: bar.example.com # username: barbaz # password: secret2 - + # -- Allow insecure registry specifies whether to allow insecure connections to registries. Not recommended. allowInsecureRegistry: false - + # -- Max signature attempts specifies the maximum number of signature envelopes that will be processed for verification maxSignatureAttempts: 30 # Service account configuration serviceAccount: - + enabled: true # -- The ServiceAccount name name: @@ -59,7 +61,7 @@ serviceAccount: # Config map configuration configMap: - + # -- The notation-plugin-config configmap name name: notation-plugin-config