github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/kubernetes-dashboard] Add variable for container securityContext (#17121)

Browse Source 
* Add support to set securityContext for pod

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Update documentation and bump version up.

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

	modified:   kubernetes-dashboard/Chart.yaml
	modified:   kubernetes-dashboard/README.md
	modified:   kubernetes-dashboard/templates/deployment.yaml
	modified:   kubernetes-dashboard/values.yaml

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Improve clarity in the documentation

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Remove changes on pod annotation.

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Remove trailing spaces.

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>

* Bump a minor version up

Signed-off-by: Paulo Gomes <paulo.gomes.uk@gmail.com>
This commit is contained in:
Paulo Gomes
2019-09-16 08:54:37 -07:00
committed by Kubernetes Prow Robot
parent 6094bc12e2
commit 5e7b6640dd
4 changed files with 26 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/kubernetes-dashboard/Chart.yaml
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: kubernetes-dashboard
version: 1.8.0
version: 1.9.0
appVersion: 1.10.1
description: General-purpose web UI for Kubernetes clusters
keywords:
stable/kubernetes-dashboard/README.md
+2 -1
View File
@@ -53,6 +53,7 @@ The following table lists the configurable parameters of the kubernetes-dashboar
| `extraArgs` | Additional container arguments | `[]` |
| `extraEnv` | Additional container environment variables | `[]` |
| `podAnnotations` | Annotations to be added to pods | {} |
| `dashboardContainerSecurityContext` | SecurityContext for the kubernetes dashboard container | {} |
| `nodeSelector` | node labels for pod assignment | `{}` |
| `tolerations` | List of node taints to tolerate (requires Kubernetes >= 1.6) | `[]` |
| `affinity` | Affinity for pod assignment | `[]` |
@@ -78,7 +79,7 @@ The following table lists the configurable parameters of the kubernetes-dashboar
| `podDisruptionBudget.enabled` | Create a PodDisruptionBudget | `false` |
| `podDisruptionBudget.minAvailable` | Minimum available instances; ignored if there is no PodDisruptionBudget | |
| `podDisruptionBudget.maxUnavailable`| Maximum unavailable instances; ignored if there is no PodDisruptionBudget | |
| `securityContext` | Security context | `{}` |
| `securityContext` | PodSecurityContext for pod level securityContext | `{}` |
| `networkPolicy` | Whether to create a network policy that allows access to the service | `false` |
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`. For example,
stable/kubernetes-dashboard/templates/deployment.yaml
+4
View File
@@ -89,6 +89,10 @@ spec:
{{- end }}
initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
{{- if .Values.dashboardContainerSecurityContext }}
securityContext:
{{ toYaml .Values.dashboardContainerSecurityContext | indent 10 }}
{{- end }}
resources:
{{ toYaml .Values.resources | indent 10 }}
{{- if .Values.image.pullSecrets }}
stable/kubernetes-dashboard/values.yaml
+19
View File
@@ -39,8 +39,21 @@ extraEnv: []
# value: 'some value'
# Annotations to be added to kubernetes dashboard pods
## Recommended value
# podAnnotations:
# seccomp.security.alpha.kubernetes.io/pod: 'runtime/default'
podAnnotations: {}
## SecurityContext for the kubernetes dashboard container
## Recommended values
# dashboardContainerSecurityContext:
# allowPrivilegeEscalation: false
# readOnlyRootFilesystem: true
## The two values below can be set here or at podLevel (using variable .securityContext)
# runAsUser: 1001
# runAsGroup: 2001
dashboardContainerSecurityContext: {}
## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
##
@@ -174,6 +187,12 @@ podDisruptionBudget:
minAvailable:
maxUnavailable:
## PodSecurityContext for pod level securityContext
##
# securityContext:
# runAsUser: 1001
# runAsGroup: 2001
securityContext: {}
networkPolicy: false