Skip to content

feat: Added Ingress SecurityContext and ServiceAccount#65

Open
tomassatka wants to merge 1 commit intopermitio:masterfrom
tomassatka:master
Open

feat: Added Ingress SecurityContext and ServiceAccount#65
tomassatka wants to merge 1 commit intopermitio:masterfrom
tomassatka:master

Conversation

@tomassatka
Copy link

Made few improvements

  1. Added securityContext to be able to run this application on more restricted k8s
  2. Added ingress for opal-client to be able to expose inner opa server
  3. Added serviceAccount in case user wants to run client/server with different SA. Good use case is query k8s api with http fetcher (considering to write k8s fetcher)

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add:

service:
port: 7000

To avoid the following error during Helm install:
Error: INSTALLATION FAILED: template: opal/templates/ingress-client.yaml:40:30: executing "opal/templates/ingress-client.yaml" at <$.Values.service.port>: nil pointer evaluating interface {}.port

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes good catch. Sorry for that. I corrected it and point to client.opaPort

@tomassatka tomassatka force-pushed the master branch 6 times, most recently from 3eeb5d5 to 139852c Compare April 16, 2025 17:46
Signed-off-by: tomassatka <satka.tomas@gmail.com>
@fililand
Copy link

fililand commented Dec 9, 2025

Hi, is there any follow-up to this PR? Having an ingress as well would be useful

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants