[stable/mysql] New configuration securityContext for the chart mysql (#12538)

* Adds security context for mysql pod

Signed-off-by: Ke Zhu <kzhu@us.ibm.com>

* Bumps minor version number for the chart mysql

Signed-off-by: Ke Zhu <kzhu@us.ibm.com>

stable/mysql/Chart.yaml

@@ -1,5 +1,5 @@
 name: mysql
-version: 0.17.0
+version: 0.19.0
 appVersion: 5.7.14
 description: Fast, reliable, scalable, and easy to use open-source relational database
   system.

stable/mysql/README.md

@@ -92,6 +92,9 @@ The following table lists the configurable parameters of the MySQL chart and the
 | `metrics.readinessProbe.timeoutSeconds`      | When the probe times out                                                                     | 1                                                    |
 | `resources`                                  | CPU/Memory resource requests/limits                                                          | Memory: `256Mi`, CPU: `100m`                         |
 | `configurationFiles`                         | List of mysql configuration files                                                            | `nil`                                                |
+| `securityContext.enabled`                    | Enable security context (mysql pod)                                                          | `false`                                              |
+| `securityContext.fsGroup`                    | Group ID for the container (mysql pod)                                                       | 999                                               |
+| `securityContext.runAsUser`                  | User ID for the container (mysql pod)                                                        | 999                                                |
 | `service.annotations`                        | Kubernetes annotations for mysql                                                             | {}                                                   |
 | `ssl.enabled`                                | Setup and use SSL for MySQL connections                                                      | `false`                                              |
 | `ssl.secret`                                 | Name of the secret containing the SSL certificates                                           | mysql-ssl-certs                                      |

stable/mysql/templates/deployment.yaml

@@ -27,6 +27,11 @@ spec:
       {{- if .Values.priorityClassName }}
       priorityClassName: "{{ .Values.priorityClassName }}"
       {{- end }}
+      {{- if .Values.securityContext.enabled }}
+      securityContext:
+        fsGroup: {{ .Values.securityContext.fsGroup }}
+        runAsUser: {{ .Values.securityContext.runAsUser }}
+      {{- end }}
       initContainers:
       - name: "remove-lost-found"
         image: "{{ .Values.busybox.image}}:{{ .Values.busybox.tag }}"

stable/mysql/values.yaml

@@ -95,6 +95,12 @@ persistence:
   size: 8Gi
   annotations: {}
 
+## Security context
+securityContext:
+  enabled: false
+  runAsUser: 999
+  fsGroup: 999
+
 ## Configure resource requests and limits
 ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
 ##