diff --git a/charts/tf-controller/README.md b/charts/tf-controller/README.md index 84b67107c..32d0eb9db 100644 --- a/charts/tf-controller/README.md +++ b/charts/tf-controller/README.md @@ -76,7 +76,7 @@ __Note__: If you need to use the `imagePullSecrets` it would be best to set `ser | rbac.create | bool | `true` | If `true`, create and use RBAC resources | | replicaCount | int | `1` | Number of TF-Controller pods to deploy | | resources | object | `{"limits":{"cpu":"1000m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"64Mi"}}` | Resource limits and requests | -| runner | object | `{"creationTimeout":"5m0s","grpc":{"maxMessageSize":4},"image":{"repository":"ghcr.io/flux-iac/tf-runner","tag":"v0.16.0-rc.4"},"serviceAccount":{"allowedNamespaces":[],"annotations":{},"create":true,"name":""}}` | Runner-specific configurations | +| runner | object | `{"creationTimeout":"5m0s","grpc":{"maxMessageSize":4},"image":{"repository":"ghcr.io/flux-iac/tf-runner","tag":"v0.16.0-rc.4"},"serviceAccount":{"allowedNamespaces":[],"annotations":{},"create":true,"name":"tf-runner"}}` | Runner-specific configurations | | runner.creationTimeout | string | `"5m0s"` | Timeout for runner-creation (Controller) | | runner.grpc.maxMessageSize | int | `4` | Maximum GRPC message size (Controller) | | runner.image.repository | string | `"ghcr.io/flux-iac/tf-runner"` | Runner image repository | @@ -84,7 +84,7 @@ __Note__: If you need to use the `imagePullSecrets` it would be best to set `ser | runner.serviceAccount.allowedNamespaces | list | `[]` | List of namespaces that the runner may run within | | runner.serviceAccount.annotations | object | `{}` | Additional runner service Account annotations | | runner.serviceAccount.create | bool | `true` | If `true`, create a new runner service account | -| runner.serviceAccount.name | string | `""` | Runner service account to be used | +| runner.serviceAccount.name | string | `"tf-runner"` | Runner service account to be used | | securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65532,"seccompProfile":{"type":"RuntimeDefault"}}` | Container-level security context | | serviceAccount.annotations | object | `{}` | Additional Service Account annotations | | serviceAccount.create | bool | `true` | If `true`, create a new service account | diff --git a/charts/tf-controller/values.yaml b/charts/tf-controller/values.yaml index 70d56f28f..3e1ab37da 100644 --- a/charts/tf-controller/values.yaml +++ b/charts/tf-controller/values.yaml @@ -131,7 +131,7 @@ runner: # -- Additional runner service Account annotations annotations: {} # -- Runner service account to be used - name: "" + name: "tf-runner" # -- List of namespaces that the runner may run within allowedNamespaces: [] # EKS-specific configurations