Merge pull request #7 from epics-containers/dev

fix issues with service account and local volume
epics-containers · Mar 24, 2023 · efd087c · efd087c
2 parents d4b028c + dd1d7b9
commit efd087c
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/templates/_deployment.yaml b/templates/_deployment.yaml
@@ -25,7 +25,7 @@ spec:
         is_ioc: "True"
     spec:
       {{ if .Values.serviceAccountName }}
-      serviceAccountName: {{ .Values.serviceAccount | default "epics-iocs-priv" | quote }}
+      serviceAccountName: {{ .Values.serviceAccountName | quote }}
       {{- end }}
       hostNetwork: {{ .Values.hostNetwork }}
       terminationGracePeriodSeconds: 15 # nice to have quick restarts on IOCs

diff --git a/templates/_ioc-volume.yaml b/templates/_ioc-volume.yaml
@@ -11,7 +11,7 @@ metadata:
     beamline: {{ .Values.beamline }}
 spec:
   accessModes:
-    - ReadWriteMany
+    - ReadWriteOnce
   resources:
     requests:
       storage: 10Mi

diff --git a/values.yaml b/values.yaml
@@ -5,6 +5,10 @@ exports:
   defaults:
     beamline: no-beamline! (always override this)
 
+    # set this to your enforce namespace service account
+    # leave blank for default service account
+    # serviceAccountName: epics-iocs-priv
+
     # to support channel access and other protocols we need to run in host's network
     hostNetwork: true
 
@@ -21,10 +25,6 @@ exports:
       # A path on the host machine to write data into, ignored if dataVolume.pvc is true
       hostPath: ""
 
-    # set this to your enforce namespace service account
-    # leave blank for default service account
-    # serviceAccount: epics-iocs-priv
-
     # provide some reasonable defaults here but allow override
     securityContext:
       allowPrivilegeEscalation: false