github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/traefik] Add distinct container SecurityContext tunable (#20743) (#20887)

Browse Source 
* [stable/traefik] Add distinct container SecurityContext tunable (#20743)

Signed-off-by: David Kirchner <dpk@dpk.net>

* [stable/traefik] Update new securityContext K8S API links to something more up to date

Signed-off-by: David Kirchner <dpk@dpk.net>
This commit is contained in:
David Kirchner
2020-03-03 07:43:38 -08:00
committed by GitHub
parent 6b4504c780
commit 9d5ff66270
4 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/traefik/Chart.yaml
+1 -1
View File
@@ -1,6 +1,6 @@
apiVersion: v1
name: traefik
version: 1.86.1
version: 1.86.2
appVersion: 1.7.20
description: A Traefik based Kubernetes ingress controller with Let's Encrypt support
keywords:
stable/traefik/README.md
+2 -1
View File
@@ -109,7 +109,8 @@ The following table lists the configurable parameters of the Traefik chart and t
| `memoryLimit` | **DEPRECATED**: use `resources` instead. Memory limit per Traefik pod | None |
| `rbac.enabled` | Whether to enable RBAC with a specific cluster role and binding for Traefik | `false` |
| `deploymentStrategy` | Specify deployment spec rollout strategy | `{}` |
| `securityContext` | Security context | `{}` |
| `podSecurityContext` | Security context for the pod. See [PodSecurityContext](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.16/#podsecuritycontext-v1-core). | `{}` |
| `containerSecurityContext` | Security context for the container. See [SecurityContext](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.16/#securitycontext-v1-core). | `{}` |
| `useNonPriviledgedPorts` | Use non privileged ports to listen. Needed if container is not running as root | `false` |
| `env` | Environment variables for the container | `{}` |
| `nodeSelector` | Node labels for pod assignment | `{}` |
stable/traefik/templates/deployment.yaml
+6 -2
View File
@@ -49,9 +49,9 @@ spec:
{{ toYaml .Values.deployment.podLabels | indent 8 }}
{{- end }}
spec:
{{- if .Values.securityContext }}
{{- if .Values.podSecurityContext }}
securityContext:
{{ toYaml .Values.securityContext | indent 8 }}
{{ toYaml .Values.podSecurityContext | indent 8 }}
{{- end }}
{{- if .Values.rbac.enabled }}
serviceAccountName: {{ template "traefik.fullname" . }}
@@ -190,6 +190,10 @@ spec:
{{- range .Values.startupArguments }}
- {{ . }}
{{- end }}
{{- if .Values.containerSecurityContext }}
securityContext:
{{ toYaml .Values.containerSecurityContext | indent 10 }}
{{- end }}
volumes:
{{- if .Values.extraVolumes }}{{ toYaml .Values.extraVolumes | trim | nindent 6 }}{{ end }}
stable/traefik/templates/storeconfig-job.yaml
+4
View File
@@ -37,6 +37,10 @@ spec:
env:
{{ toYaml .Values.env | indent 12 }}
{{- end }}
{{- if .Values.containerSecurityContext }}
securityContext:
{{ toYaml .Values.containerSecurityContext | indent 10 }}
{{- end }}
volumes:
- name: config
configMap: