contour: Add Lokomotive specific changes
These changes should always be carried to make sure that Contour runs
without problems in Lokomotive settings.
---
+# XXX: Lokomotive specific change
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+ name: envoy
+ namespace: projectcontour
+---
+# XXX: Lokomotive specific change
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+ name: envoy-privileged-psp
+ namespace: projectcontour
+roleRef:
+ kind: ClusterRole
+ name: privileged-psp
+ apiGroup: rbac.authorization.k8s.io
+subjects:
+- kind: ServiceAccount
+ name: envoy
+ namespace: projectcontour
+---
apiVersion: apps/v1
kind: DaemonSet
metadata:
@@ -107,7 +129,8 @@ spec:
valueFrom:
fieldRef:
fieldPath: metadata.namespace
- automountServiceAccountToken: false
+ # XXX: Lokomotive specific change
+ serviceAccountName: envoy
volumes:
- name: envoy-config
emptyDir: {}
