From d3fbfb1108be7a3fe4290fcee45dc489d6e8b832 Mon Sep 17 00:00:00 2001 From: "David J. M. Karlsen" Date: Sat, 20 Jul 2019 09:32:55 +0200 Subject: [PATCH] [stable/karma] support securityContext to run as non-root (#15723) Signed-off-by: David J. M. Karlsen --- stable/karma/Chart.yaml | 2 +- stable/karma/README.md | 1 + stable/karma/templates/deployment.yaml | 4 ++++ stable/karma/values.yaml | 2 ++ 4 files changed, 8 insertions(+), 1 deletion(-) diff --git a/stable/karma/Chart.yaml b/stable/karma/Chart.yaml index bfdbb92510..c4767a5c87 100644 --- a/stable/karma/Chart.yaml +++ b/stable/karma/Chart.yaml @@ -6,7 +6,7 @@ home: https://github.com/prymitive/karma sources: - https://hub.docker.com/r/lmierzwa/karma/ - https://github.com/prymitive/karma -version: 1.1.16 +version: 1.1.17 maintainers: - name: davidkarlsen email: david@davidkarlsen.com diff --git a/stable/karma/README.md b/stable/karma/README.md index ae8d9b0185..b68d8a48f5 100644 --- a/stable/karma/README.md +++ b/stable/karma/README.md @@ -56,6 +56,7 @@ The following table lists the configurable parameters of the karma chart and the | `nodeSelector` | Settings for nodeselector | `{}` | | `tolerations` | Settings for toleration | `{}` | | `affinity` | Settings for affinity | `{}` | +| `securityContext` | Settings for security context | `{}` | | `serviceAccount.create` | Create service-account | `true` | | `serviceAccount.name` | Override service-account name | `` | | `livenessProbe.delay` | Specify delay in executing probe | `5` | diff --git a/stable/karma/templates/deployment.yaml b/stable/karma/templates/deployment.yaml index 68bafcd7b9..a5aa3e1e7a 100644 --- a/stable/karma/templates/deployment.yaml +++ b/stable/karma/templates/deployment.yaml @@ -24,6 +24,10 @@ spec: {{- end }} spec: serviceAccountName: {{ template "karma.serviceAccountName" . }} + {{- if .Values.securityContext }} + securityContext: +{{ toYaml .Values.securityContext | indent 8 }} + {{- end }} containers: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" diff --git a/stable/karma/values.yaml b/stable/karma/values.yaml index bede62154c..646d2b6cd3 100644 --- a/stable/karma/values.yaml +++ b/stable/karma/values.yaml @@ -60,6 +60,8 @@ tolerations: [] affinity: {} +securityContext: {} + # configuration for liveness probe livenessProbe: delay: 5