fix: isolate PaC execution service account
This commit is contained in:
@@ -10,7 +10,7 @@ metadata:
|
|||||||
pipelinesascode.tekton.dev/max-keep-runs: "8"
|
pipelinesascode.tekton.dev/max-keep-runs: "8"
|
||||||
unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01
|
unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01
|
||||||
unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery"
|
unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery"
|
||||||
unidesk.ai/effective-config-sha256: sha256:335c9e900a9b11998b8881e08ab36b89dce9c8c62397b5317ba3e9399f985336
|
unidesk.ai/effective-config-sha256: sha256:e4d95e74410816956a8f848eb379bf73d26bab130db498fd69a442c0a1725e5d
|
||||||
unidesk.ai/source-artifact-renderer: sub2rank-platform-service
|
unidesk.ai/source-artifact-renderer: sub2rank-platform-service
|
||||||
unidesk.ai/source-artifact-mode: embedded-pipeline-spec
|
unidesk.ai/source-artifact-mode: embedded-pipeline-spec
|
||||||
labels:
|
labels:
|
||||||
@@ -419,7 +419,7 @@ spec:
|
|||||||
- name: manifest-template-b64
|
- name: manifest-template-b64
|
||||||
value: $(params.manifest-template-b64)
|
value: $(params.manifest-template-b64)
|
||||||
taskRunTemplate:
|
taskRunTemplate:
|
||||||
serviceAccountName: default
|
serviceAccountName: sub2rank-nc01-tekton-runner
|
||||||
podTemplate:
|
podTemplate:
|
||||||
hostNetwork: true
|
hostNetwork: true
|
||||||
dnsPolicy: ClusterFirstWithHostNet
|
dnsPolicy: ClusterFirstWithHostNet
|
||||||
|
|||||||
Reference in New Issue
Block a user