github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added securityContext to Redis HAProxy Deployment (#17760)

Browse Source 
Signed-off-by: Shane O'Brien <sobrien@triplelift.com>
This commit is contained in:
Shane O'Brien
2019-10-09 00:30:02 -07:00
committed by Kubernetes Prow Robot
parent 0a7cc797ea
commit 7a9d149faa
4 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/redis-ha/Chart.yaml
+1 -1
View File
@@ -6,7 +6,7 @@ keywords:
- redis
- keyvalue
- database
version: 3.7.17
version: 3.8.0
appVersion: 5.0.5
description: Highly available Kubernetes implementation of Redis
icon: https://upload.wikimedia.org/wikipedia/en/thumb/6/6b/Redis_Logo.svg/1200px-Redis_Logo.svg.png
stable/redis-ha/README.md
+2
View File
@@ -78,6 +78,7 @@ The following table lists the configurable parameters of the Redis chart and the
| `tolerations` | Toleration labels for pod assignment | `[]` |
| `hardAntiAffinity` | Whether the Redis server pods should be forced to run on separate nodes. | `true` |
| `additionalAffinities` | Additional affinities to add to the Redis server pods. | `{}` |
| `securityContext` | Security context to be added to the Redis server pods. | `{runAsUser: 1000, fsGroup: 1000, runAsNonRoot: true}` |
| `affinity` | Override all other affinity settings with a string. | `""` |
| `exporter.enabled` | If `true`, the prometheus exporter sidecar is enabled | `false` |
| `exporter.image` | Exporter image | `oliver006/redis_exporter` |
@@ -102,6 +103,7 @@ The following table lists the configurable parameters of the Redis chart and the
| `haproxy.timeout.server` | haproxy.cfg `timeout server` setting | `30s` |
| `haproxy.timeout.client` | haproxy.cfg `timeout client` setting | `30s` |
| `haproxy.priorityClassName` | priorityClassName for `haproxy` deployment | not set |
| `haproxy.securityContext` | Security context to be added to the HAProxy deployment. | `{runAsUser: 1000, fsGroup: 1000, runAsNonRoot: true}` |
| `podDisruptionBudget` | Pod Disruption Budget rules | `{}` |
| `priorityClassName` | priorityClassName for `redis-ha-statefulset` | not set |
| `hostPath.path` | Use this path on the host for data storage | not set |
stable/redis-ha/templates/redis-haproxy-deployment.yaml
+2
View File
@@ -53,6 +53,8 @@ spec:
readOnly: true
- name: data
mountPath: /data
securityContext:
{{ toYaml .Values.haproxy.securityContext | indent 8 }}
containers:
{{- if .Values.haproxy.exporter.enabled }}
- name: prometheus-exporter
stable/redis-ha/values.yaml
+4
View File
@@ -64,6 +64,10 @@ haproxy:
connect: 4s
server: 30s
client: 30s
securityContext:
runAsUser: 1000
fsGroup: 1000
runAsNonRoot: true
## Role Based Access