Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

feat(helm): add pod-level securityContext support for certificate mounting#19041

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
ausbru87 merged 4 commits intomainfromfeat-helm_19038_pod-level-securityContext
Jul 29, 2025

Conversation

ausbru87
Copy link
Contributor

@ausbru87ausbru87 commentedJul 24, 2025•
edited
Loading

Add pod-level securityContext support to Coder Helm chart

Addscoder.podSecurityContext field to enable pod-level security settings, primarily to solve TLS certificate mounting permission issues.

Problem: When mounting TLS certificates from Kubernetes secrets, the Coder process (UID 1000) cannot read the files due to restrictive permissions.

Solution: SettingpodSecurityContext.fsGroup: 1000 ensures Kubernetes sets group ownership of mounted volumes to GID 1000, allowing the Coder process to read certificate files.

Changes:

  • AddedpodSecurityContext field to values.yaml with documentation
  • Updated_coder.yaml template to include pod-level security context
  • Added test case and golden files
  • Maintains backward compatibility (opt-in feature)

Usage:

coder:podSecurityContext:fsGroup:1000# Enables TLS cert access

Fixes#19038

@github-actionsGitHub Actions
Copy link

github-actionsbot commentedJul 24, 2025•
edited
Loading

All contributors have signed the CLA ✍️ ✅
Posted by theCLA Assistant Lite bot.

@ausbru87
Copy link
ContributorAuthor

I have read the CLA Document and I hereby sign the CLA

cdrci2 added a commit to coder/cla that referenced this pull requestJul 24, 2025
@ausbru87ausbru87 changed the title[WIP] feat(helm): Add pod-level securityContext support - Fixes #19038[WIP] feat(helm): add pod-level securityContext support for certificate mountingJul 24, 2025
@ausbru87ausbru87 changed the title[WIP] feat(helm): add pod-level securityContext support for certificate mountingfeat(helm): add pod-level securityContext support for certificate mountingJul 24, 2025
@ausbru87ausbru87 added the customer-requestedDO NOT USE. Instead, add to the project and fill in "Customer". labelJul 24, 2025
Copy link
Contributor

@jdomeracki-coderjdomeracki-coder left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

This PR looks really solid to me, +1

@ausbru87ausbru87 merged commitfaac753 intomainJul 29, 2025
35 of 36 checks passed
@ausbru87ausbru87 deleted the feat-helm_19038_pod-level-securityContext branchJuly 29, 2025 00:41
@github-actionsgithub-actionsbot locked and limited conversation to collaboratorsJul 29, 2025
Sign up for freeto subscribe to this conversation on GitHub. Already have an account?Sign in.
Reviewers

@jdomeracki-coderjdomeracki-coderjdomeracki-coder approved these changes

Assignees

@ausbru87ausbru87

Labels
customer-requestedDO NOT USE. Instead, add to the project and fill in "Customer".
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

feat(helm): Add pod-level securityContext support for certificate mounting
2 participants
@ausbru87@jdomeracki-coder
[8]ページ先頭
©2009-2025 Movatter.jp