[stable/curator] - configure pod security context (#11696)

Signed-off-by: Maxime VISONNEAU <maxime.visonneau@gmail.com>

stable/elasticsearch-curator/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: "5.5.4"
 description: A Helm chart for Elasticsearch Curator
 name: elasticsearch-curator
-version: 1.3.1
+version: 1.3.2
 home: https://github.com/elastic/curator
 keywords:
 - curator

stable/elasticsearch-curator/README.md

@@ -52,6 +52,6 @@ their default values.
 | `priorityClassName`                  | priorityClassName                                           | `nil`                                        |
 | `extraVolumeMounts`                  | Mount extra volume(s),                                      |                                              |
 | `extraVolumes`                       | Extra volumes                                               |                                              |
-
+| `securityContext`                    | Configure PodSecurityContext                          |
 Specify each parameter using the `--set key=value[,key=value]` argument to
 `helm install`.

stable/elasticsearch-curator/templates/cronjob.yaml

@@ -100,5 +100,9 @@ spec:
     {{- end }}
     {{- with .Values.tolerations }}
           tolerations:
+{{ toYaml . | indent 12 }}
+    {{- end }}
+    {{- with .Values.securityContext }}
+          securityContext:
 {{ toYaml . | indent 12 }}
     {{- end }}

stable/elasticsearch-curator/values.yaml

@@ -100,3 +100,6 @@ priorityClassName: ""
 #   - name: es-certs
 #     mountPath: /certs
 #     readOnly: true
+
+securityContext:
+  runAsUser: 16  # run as cron user instead of root