diff --git a/deployments/kubernetes/chart/reloader/templates/deployment.yaml b/deployments/kubernetes/chart/reloader/templates/deployment.yaml index 1ee346f6..90cd67e2 100644 --- a/deployments/kubernetes/chart/reloader/templates/deployment.yaml +++ b/deployments/kubernetes/chart/reloader/templates/deployment.yaml @@ -114,6 +114,10 @@ spec: periodSeconds: {{ .Values.reloader.deployment.readinessProbe.periodSeconds | default "10" }} successThreshold: {{ .Values.reloader.deployment.readinessProbe.successThreshold | default "1" }} + {{- with .Values.reloader.deployment.containerSecurityContext }} + securityContext: {{ toYaml . | nindent 10 }} + {{- end }} + {{- if eq .Values.reloader.readOnlyRootFileSystem true }} volumeMounts: - mountPath: /tmp/ diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml index d4b48b2d..810154d0 100644 --- a/deployments/kubernetes/chart/reloader/values.yaml +++ b/deployments/kubernetes/chart/reloader/values.yaml @@ -43,6 +43,13 @@ reloader: runAsNonRoot: true runAsUser: 65534 + containerSecurityContext: {} + # capabilities: + # drop: + # - ALL + # allowPrivilegeEscalation: false + # readOnlyRootFilesystem: true + # A list of tolerations to be applied to the Deployment. # Example: # tolerations: diff --git a/deployments/kubernetes/templates/chart/values.yaml.tmpl b/deployments/kubernetes/templates/chart/values.yaml.tmpl index f67b17dd..dac3df21 100644 --- a/deployments/kubernetes/templates/chart/values.yaml.tmpl +++ b/deployments/kubernetes/templates/chart/values.yaml.tmpl @@ -43,6 +43,13 @@ reloader: runAsNonRoot: true runAsUser: 65534 + containerSecurityContext: {} + # capabilities: + # drop: + # - ALL + # allowPrivilegeEscalation: false + # readOnlyRootFilesystem: true + # A list of tolerations to be applied to the Deployment. # Example: # tolerations: