Commitdf52e3c

authored

feat: Add ability to define securityContext (#99)

Signed-off-by: Marco Maurer <mkilchhofer@users.noreply.github.com>

1 parent7414793 commitdf52e3cCopy full SHA for df52e3c

File tree

+16

-0

lines changed

+16

-0

lines changed

Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -85,6 +85,10 @@ spec:`
`85`	`85`	`-name:SSL_CERT_DIR`
`86`	`86`	`value:{{ .Values.image.sslCertDir }}`
`87`	`87`	`{{- end }}`
	`88`	`+{{- with .Values.securityContext }}`
	`89`	`+securityContext:`
	`90`	`+{{- toYaml . \| nindent 12 }}`
	`91`	`+{{- end }}`
`88`	`92`	`{{- if .Values.volumeMounts }}`
`89`	`93`	`volumeMounts:{{- toYaml .Values.volumeMounts \| nindent 12 }}`
`90`	`94`	`{{- end }}`

Lines changed: 12 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -89,3 +89,15 @@ tolerations:`
`89`	`89`	`# labels -- The pod labels for coder-logstream-kube. See:`
`90`	`90`	`# https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/`
`91`	`91`	`labels:{}`
	`92`	`+`
	`93`	`+# securityContext -- Container-level security context`
	`94`	`+# See: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/`
	`95`	`+securityContext:{}`
	`96`	`+# allowPrivilegeEscalation: false`
	`97`	`+# capabilities:`
	`98`	`+# drop:`
	`99`	`+# - ALL`
	`100`	`+# readOnlyRootFilesystem: true`
	`101`	`+# runAsNonRoot: true`
	`102`	`+# seccompProfile:`
	`103`	`+# type: RuntimeDefault`

Comments

(0)