From fa75df8e96fb89b3e59eea4577cf68cf81fb2473 Mon Sep 17 00:00:00 2001
From: Ruins He <lyhypacm@gmail.com>
Date: Mon, 3 Jan 2022 18:22:43 +0800
Subject: [PATCH] feat(kubernetes/chart): add container security context
 configuration into values.yaml.tpl

Signed-off-by: Ruins He <lyhypacm@gmail.com>
---
 deployments/kubernetes/chart/reloader/values.yaml       | 1 -
 deployments/kubernetes/templates/chart/values.yaml.tmpl | 7 +++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/deployments/kubernetes/chart/reloader/values.yaml b/deployments/kubernetes/chart/reloader/values.yaml
index debdab17..88e43f82 100644
--- a/deployments/kubernetes/chart/reloader/values.yaml
+++ b/deployments/kubernetes/chart/reloader/values.yaml
@@ -48,7 +48,6 @@ reloader:
       # allowPrivilegeEscalation: false
       # readOnlyRootFilesystem: true
 
-
     # A list of tolerations to be applied to the Deployment.
     # Example:
     #   tolerations:
diff --git a/deployments/kubernetes/templates/chart/values.yaml.tmpl b/deployments/kubernetes/templates/chart/values.yaml.tmpl
index 084661ba..0c1c34e7 100644
--- a/deployments/kubernetes/templates/chart/values.yaml.tmpl
+++ b/deployments/kubernetes/templates/chart/values.yaml.tmpl
@@ -40,6 +40,13 @@ reloader:
       runAsNonRoot: true
       runAsUser: 65534
 
+    containerSecurityContext: {}
+      # capabilities:
+      #   drop:
+      #     - ALL
+      # allowPrivilegeEscalation: false
+      # readOnlyRootFilesystem: true
+
     # A list of tolerations to be applied to the Deployment.
     # Example:
     #   tolerations: