From ca9860b14d8071bbdf0739a5da508c3f49f3e227 Mon Sep 17 00:00:00 2001 From: Marco Maurer Date: Thu, 3 Apr 2025 22:39:06 +0200 Subject: [PATCH] feat: Add ability to define securityContext Signed-off-by: Marco Maurer --- helm/templates/service.yaml | 4 ++++ helm/values.yaml | 12 ++++++++++++ 2 files changed, 16 insertions(+) diff --git a/helm/templates/service.yaml b/helm/templates/service.yaml index a010a86..a414f2a 100644 --- a/helm/templates/service.yaml +++ b/helm/templates/service.yaml @@ -85,6 +85,10 @@ spec: - name: SSL_CERT_DIR value: {{ .Values.image.sslCertDir }} {{- end }} + {{- with .Values.securityContext }} + securityContext: + {{- toYaml . | nindent 12 }} + {{- end }} {{- if .Values.volumeMounts }} volumeMounts: {{- toYaml .Values.volumeMounts | nindent 12 }} {{- end }} diff --git a/helm/values.yaml b/helm/values.yaml index 2919afd..7ae1a1c 100644 --- a/helm/values.yaml +++ b/helm/values.yaml @@ -89,3 +89,15 @@ tolerations: # labels -- The pod labels for coder-logstream-kube. See: # https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ labels: {} + +# securityContext -- Container-level security context +# See: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ +securityContext: {} + # allowPrivilegeEscalation: false + # capabilities: + # drop: + # - ALL + # readOnlyRootFilesystem: true + # runAsNonRoot: true + # seccompProfile: + # type: RuntimeDefault pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy