Merge pull request #377 from sterchelen/feature/k8s-conf-rest-api

Expose Kuma rest api in read only mode
kumahq · Oct 26, 2019 · b5d2edb · b5d2edb
2 parents e4b6b53 + 8737a3d
commit b5d2edb
Show file tree

Hide file tree

Showing 5 changed files with 25 additions and 19 deletions.
diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.defaults.golden.yaml
@@ -2664,6 +2664,8 @@ spec:
           value: "5443"
         - name: KUMA_KUBERNETES_ADMISSION_SERVER_CERT_DIR
           value: /var/run/secrets/kuma.io/kuma-admission-server/tls-cert
+        - name: KUMA_API_SERVER_READ_ONLY
+          value: "true"
         args:
         - run
         - --log-level=info

diff --git a/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml b/app/kumactl/cmd/install/testdata/install-control-plane.overrides.golden.yaml
@@ -2664,6 +2664,8 @@ spec:
           value: "5443"
         - name: KUMA_KUBERNETES_ADMISSION_SERVER_CERT_DIR
           value: /var/run/secrets/kuma.io/kuma-admission-server/tls-cert
+        - name: KUMA_API_SERVER_READ_ONLY
+          value: "true"
         args:
         - run
         - --log-level=info

diff --git a/app/kumactl/data/install/k8s/control-plane/kuma-cp/app.yaml b/app/kumactl/data/install/k8s/control-plane/kuma-cp/app.yaml
@@ -111,6 +111,8 @@ spec:
           value: "5443"
         - name: KUMA_KUBERNETES_ADMISSION_SERVER_CERT_DIR
           value: /var/run/secrets/kuma.io/kuma-admission-server/tls-cert
+        - name: KUMA_API_SERVER_READ_ONLY
+          value: "true"
         args:
         - run
         - --log-level=info

diff --git a/app/kumactl/pkg/install/k8s/control-plane/templates_vfsdata.go b/app/kumactl/pkg/install/k8s/control-plane/templates_vfsdata.go
diff --git a/app/kumactl/pkg/install/universal/control-plane/postgres/schema_vfsdata.go b/app/kumactl/pkg/install/universal/control-plane/postgres/schema_vfsdata.go