diff --git a/helm/templates/service.yaml b/helm/templates/service.yaml index a010a86..a414f2a 100644 --- a/helm/templates/service.yaml +++ b/helm/templates/service.yaml @@ -85,6 +85,10 @@ spec: - name: SSL_CERT_DIR value: {{ .Values.image.sslCertDir }} {{- end }} + {{- with .Values.securityContext }} + securityContext: + {{- toYaml . | nindent 12 }} + {{- end }} {{- if .Values.volumeMounts }} volumeMounts: {{- toYaml .Values.volumeMounts | nindent 12 }} {{- end }} diff --git a/helm/values.yaml b/helm/values.yaml index 2919afd..7ae1a1c 100644 --- a/helm/values.yaml +++ b/helm/values.yaml @@ -89,3 +89,15 @@ tolerations: # labels -- The pod labels for coder-logstream-kube. See: # https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ labels: {} + +# securityContext -- Container-level security context +# See: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ +securityContext: {} + # allowPrivilegeEscalation: false + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # seccompProfile: + # type: RuntimeDefault
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: