github.com/replicatedcom/ship@v0.50.0/integration/base/shipapp-helm-values/expected/installer/consul/templates/basic-acls.yaml (about)

     1  {{- if .Values.acl.enabled}}
     2  apiVersion: batch/v1
     3  kind: Job
     4  metadata:
     5    name: "configure-basic-acls"
     6    annotations:
     7      "helm.sh/hook": post-install
     8      "helm.sh/hook-delete-policy": hook-succeeded
     9    labels:
    10      heritage: {{ .Release.Service | quote }}
    11      release: {{ .Release.Name | quote }}
    12      chart: {{ template "consul.chart" . }}
    13      component: "{{ .Release.Name }}-{{ .Values.Component }}"
    14  spec:
    15    template:
    16      metadata:
    17        name: "configure-basic-acls"
    18        labels:
    19          heritage: {{ .Release.Service | quote }}
    20          release: {{ .Release.Name | quote }}
    21          chart: {{ template "consul.chart" . }}
    22          component: "{{ .Release.Name }}-{{ .Values.Component }}"
    23      spec:
    24        restartPolicy: Never
    25        containers:
    26        - name: "add-agent-acl"
    27          image: appropriate/curl:latest
    28          args:
    29          - -X 
    30          - PUT
    31          - --header
    32          - 'X-Consul-Token: {{ .Values.acl.masterToken }}'
    33          - --data
    34          - '{ "Name": "Agent Token", "Type": "client", "Rules": "node \"\" { policy = \"write\" } service \"\" { policy = \"read\" } key \"_rexec\" { policy = \"write\" }", "ID": "{{ .Values.acl.agentToken }}"}'
    35          - 'http://{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.HttpPort }}/v1/acl/create'
    36        - name: "modify-anonymous-acl"
    37          image: appropriate/curl:latest
    38          args:
    39          - -X 
    40          - PUT
    41          - --header
    42          - 'X-Consul-Token: {{ .Values.acl.masterToken }}'
    43          - --data
    44          - '{ "Name": "Anonymous Token", "Type": "client", "Rules": "node \"\" { policy = \"read\" }", "ID": "anonymous"}'
    45          - 'http://{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.HttpPort }}/v1/acl/create'
    46  {{- end }}