diff --git a/stable/redis-ha/Chart.yaml b/stable/redis-ha/Chart.yaml index 76282ac2ae..6f0e87c9a0 100644 --- a/stable/redis-ha/Chart.yaml +++ b/stable/redis-ha/Chart.yaml @@ -6,7 +6,7 @@ keywords: - redis - keyvalue - database -version: 3.7.17 +version: 3.8.0 appVersion: 5.0.5 description: Highly available Kubernetes implementation of Redis icon: https://upload.wikimedia.org/wikipedia/en/thumb/6/6b/Redis_Logo.svg/1200px-Redis_Logo.svg.png diff --git a/stable/redis-ha/README.md b/stable/redis-ha/README.md index 1fb0f28133..162f66bd4b 100644 --- a/stable/redis-ha/README.md +++ b/stable/redis-ha/README.md @@ -78,6 +78,7 @@ The following table lists the configurable parameters of the Redis chart and the | `tolerations` | Toleration labels for pod assignment | `[]` | | `hardAntiAffinity` | Whether the Redis server pods should be forced to run on separate nodes. | `true` | | `additionalAffinities` | Additional affinities to add to the Redis server pods. | `{}` | +| `securityContext` | Security context to be added to the Redis server pods. | `{runAsUser: 1000, fsGroup: 1000, runAsNonRoot: true}` | | `affinity` | Override all other affinity settings with a string. | `""` | | `exporter.enabled` | If `true`, the prometheus exporter sidecar is enabled | `false` | | `exporter.image` | Exporter image | `oliver006/redis_exporter` | @@ -102,6 +103,7 @@ The following table lists the configurable parameters of the Redis chart and the | `haproxy.timeout.server` | haproxy.cfg `timeout server` setting | `30s` | | `haproxy.timeout.client` | haproxy.cfg `timeout client` setting | `30s` | | `haproxy.priorityClassName` | priorityClassName for `haproxy` deployment | not set | +| `haproxy.securityContext` | Security context to be added to the HAProxy deployment. | `{runAsUser: 1000, fsGroup: 1000, runAsNonRoot: true}` | | `podDisruptionBudget` | Pod Disruption Budget rules | `{}` | | `priorityClassName` | priorityClassName for `redis-ha-statefulset` | not set | | `hostPath.path` | Use this path on the host for data storage | not set | diff --git a/stable/redis-ha/templates/redis-haproxy-deployment.yaml b/stable/redis-ha/templates/redis-haproxy-deployment.yaml index bd8f5cd961..4715f761b6 100644 --- a/stable/redis-ha/templates/redis-haproxy-deployment.yaml +++ b/stable/redis-ha/templates/redis-haproxy-deployment.yaml @@ -53,6 +53,8 @@ spec: readOnly: true - name: data mountPath: /data + securityContext: +{{ toYaml .Values.haproxy.securityContext | indent 8 }} containers: {{- if .Values.haproxy.exporter.enabled }} - name: prometheus-exporter diff --git a/stable/redis-ha/values.yaml b/stable/redis-ha/values.yaml index a9510c6b44..199119fc3e 100644 --- a/stable/redis-ha/values.yaml +++ b/stable/redis-ha/values.yaml @@ -64,6 +64,10 @@ haproxy: connect: 4s server: 30s client: 30s + securityContext: + runAsUser: 1000 + fsGroup: 1000 + runAsNonRoot: true ## Role Based Access