feat(kubernetes/chart): add container security context support for Helm chart

Signed-off-by: Ruins He <lyhypacm@gmail.com>
This commit is contained in:
Ruins He
2022-01-03 18:00:15 +08:00
parent 766bc24241
commit 21087aaddc
2 changed files with 12 additions and 0 deletions
@@ -114,6 +114,10 @@ spec:
periodSeconds: {{ .Values.reloader.deployment.readinessProbe.periodSeconds | default "10" }}
successThreshold: {{ .Values.reloader.deployment.readinessProbe.successThreshold | default "1" }}
{{- with .Values.reloader.deployment.containerSecurityContext }}
securityContext: {{ toYaml . | nindent 10 }}
{{- end }}
{{- if eq .Values.reloader.readOnlyRootFileSystem true }}
volumeMounts:
- mountPath: /tmp/
@@ -41,6 +41,14 @@ reloader:
runAsNonRoot: true
runAsUser: 65534
containerSecurityContext: {}
# capabilities:
# drop:
# - ALL
# allowPrivilegeEscalation: false
# readOnlyRootFilesystem: true
# A list of tolerations to be applied to the Deployment.
# Example:
# tolerations: