diff --git a/deployments/kubernetes/chart/reloader/templates/deployment.yaml b/deployments/kubernetes/chart/reloader/templates/deployment.yaml index 7b89f078..fb5828bd 100644 --- a/deployments/kubernetes/chart/reloader/templates/deployment.yaml +++ b/deployments/kubernetes/chart/reloader/templates/deployment.yaml @@ -114,6 +114,10 @@ spec: periodSeconds: {{ .Values.reloader.deployment.readinessProbe.periodSeconds | default "10" }} successThreshold: {{ .Values.reloader.deployment.readinessProbe.successThreshold | default "1" }} + {{- with .Values.reloader.deployment.containerSecurityContext }} + securityContext: {{ toYaml . | nindent 10 }} + {{- end }} + {{- if eq .Values.reloader.readOnlyRootFileSystem true }} volumeMounts: - mountPath: /tmp/ diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index b7c7e406..debdab17 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -41,6 +41,14 @@ reloader: runAsNonRoot: true runAsUser: 65534 + containerSecurityContext: {} + # capabilities: + # drop: + # - ALL + # allowPrivilegeEscalation: false + # readOnlyRootFilesystem: true + + # A list of tolerations to be applied to the Deployment. # Example: # tolerations: