)]}'
{"helm-toolkit/templates/snippets/_kubernetes_rbac.tpl":[{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"2e1c2d89370d231e5c969892d63e3d05c9ac619a","unresolved":false,"context_lines":[{"line_number":59,"context_line":"  name: secret-entrypoint-{{ $component }}"},{"line_number":60,"context_line":"  namespace:  {{ $envAll.Release.Namespace }}"},{"line_number":61,"context_line":"  annotations:"},{"line_number":62,"context_line":"    kubernetes.io/service-account.name: service-account-entrypoint-{{ $component }}"},{"line_number":63,"context_line":"    # Tiller sorts the execution of resources in the following order:"},{"line_number":64,"context_line":"    # Secret, ServiceAccount, Role, RoleBinding. The problem is that"},{"line_number":65,"context_line":"    # this Secret will not be created if ServiceAccount doesn\u0027t exist."},{"line_number":66,"context_line":"    # The solution is to add post-install hook so that Secret is created"},{"line_number":67,"context_line":"    # at the end."},{"line_number":68,"context_line":"    helm.sh/hook: post-install"},{"line_number":69,"context_line":"type: kubernetes.io/service-account-token"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"---"}],"source_content_type":"text/x-smarty","patch_set":29,"id":"3f4b6375_0ff8f4c1","line":68,"range":{"start_line":62,"start_character":0,"end_line":68,"end_character":30},"updated":"2017-11-01 03:08:40.000000000","message":"I have been using aspects of this PS in OSH-Infra (https://review.openstack.org/#/c/516688/), you will need to move all of the objects in this manifest to \u0027pre-install\u0027 as per https://review.openstack.org/#/c/516688/2/helm-toolkit/templates/snippets/_kubernetes_entrypoint_rbac.tpl for helm\u0027s native --wait to operate successfully on deployment.","commit_id":"13415014a52e3c4038d8008a067df871155dd800"},{"author":{"_account_id":15518,"name":"Artur Korzeniewski","email":"artur.korzen@wp.pl","username":"akorzeni"},"change_message_id":"d8aaf38c0d50a819b3a9f243d5d4800d626ce1c8","unresolved":false,"context_lines":[{"line_number":59,"context_line":"  name: secret-entrypoint-{{ $component }}"},{"line_number":60,"context_line":"  namespace:  {{ $envAll.Release.Namespace }}"},{"line_number":61,"context_line":"  annotations:"},{"line_number":62,"context_line":"    kubernetes.io/service-account.name: service-account-entrypoint-{{ $component }}"},{"line_number":63,"context_line":"    # Tiller sorts the execution of resources in the following order:"},{"line_number":64,"context_line":"    # Secret, ServiceAccount, Role, RoleBinding. The problem is that"},{"line_number":65,"context_line":"    # this Secret will not be created if ServiceAccount doesn\u0027t exist."},{"line_number":66,"context_line":"    # The solution is to add post-install hook so that Secret is created"},{"line_number":67,"context_line":"    # at the end."},{"line_number":68,"context_line":"    helm.sh/hook: post-install"},{"line_number":69,"context_line":"type: kubernetes.io/service-account-token"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"---"}],"source_content_type":"text/x-smarty","patch_set":29,"id":"3f4b6375_7bcee05a","line":68,"range":{"start_line":62,"start_character":0,"end_line":68,"end_character":30},"in_reply_to":"3f4b6375_0ff8f4c1","updated":"2017-11-02 09:14:09.000000000","message":"So you mean that every ClusterRole(Binding), Role(Binding) and service account need to be created pre-install, not only for kubernetes-entrypoint but also for ceph, keystone, glance and other services in OSH?","commit_id":"13415014a52e3c4038d8008a067df871155dd800"}]}