prole/tmp/fix_gitlab_sa.sh

27 lines
753 B
Bash

#!/usr/bin/env bash
set -euo pipefail
KUBECONFIG=/Users/chrisfu/dev/knoe/knoe-k3s.kubeconfig
export KUBECONFIG
echo "==> Creating gitlab-app-nonroot ServiceAccount..."
kubectl -n gitlab apply -f - <<'SAYAML'
apiVersion: v1
kind: ServiceAccount
metadata:
name: gitlab-app-nonroot
namespace: gitlab
SAYAML
echo "==> Patching GitLab CR to set serviceAccount.create=false..."
kubectl -n gitlab patch gitlab gitlab --type=merge \
-p '{"spec":{"chart":{"values":{"global":{"serviceAccount":{"create":false}}}}}}'
echo "==> Waiting 15s for operator to reconcile..."
sleep 15
echo "==> GitLab CR status:"
kubectl -n gitlab get gitlab gitlab
echo "==> Operator last 20 log lines:"
kubectl logs -n gitlab deployment/gitlab-controller-manager --tail=20