Remove hardcoded "fission" namespace in various places. Remove etcd deployment and service, since we use K8s APIs now. Add ClusterRoleBinding for the fission service account, to allow fission components to access TPRs. We currently make the service account a cluster admin. This is more permissive than it should be; we should define a specific role for just fission resources.
45 lines
937 B
YAML
45 lines
937 B
YAML
#
|
|
# Fission chart configuration
|
|
#
|
|
|
|
## Kubernetes configuration
|
|
## For minikube, set this to NodePort, elsewhere use LoadBalancer.
|
|
serviceType: LoadBalancer
|
|
|
|
## Fission image repostiroy
|
|
image: fission/fission-bundle
|
|
|
|
## Image pull policy
|
|
pullPolicy: ifNotPresent
|
|
|
|
## Fission image version
|
|
imageTag: nightly20170705
|
|
|
|
## Port at which Fission controller service should be exposed
|
|
controllerPort: 31313
|
|
|
|
## Port at which Fission router service should be exposed
|
|
routerPort: 31314
|
|
|
|
## Namespace in which to run fission functions (this is different from
|
|
## the release namespace)
|
|
functionNamespace: fission-function
|
|
|
|
## Set up openshift RBAC rule
|
|
openshift: false
|
|
|
|
## Logger config
|
|
logger:
|
|
influxdbAdmin: "admin"
|
|
fluentdImage: fission/fluentd
|
|
|
|
## Fission ui config
|
|
fissionUiImage: fission/fission-ui:0.1.0
|
|
|
|
## Message queue trigger config
|
|
### NATS Streaming
|
|
nats:
|
|
authToken: "defaultFissionAuthToken"
|
|
clusterID: "fissionMQTrigger"
|
|
|