From fc076f7311f36bcfb521909ee02822174969af53 Mon Sep 17 00:00:00 2001 From: zoramthanga <31112473+zoramthanga@users.noreply.github.com> Date: Wed, 3 Jun 2020 15:34:43 -0700 Subject: [PATCH] stable/nfs-server-provisioner Add ability to specify pod Security Context settings (#22642) * Add ability to specify Security Context settings for NFS Server Provisioner. Signed-off-by: Zoram Thanga * Changed version number, and changed Helm value to podSecurityContext to avoid confusion with container level Security Context. Signed-off-by: Zoram Thanga --- stable/nfs-server-provisioner/Chart.yaml | 2 +- stable/nfs-server-provisioner/README.md | 1 + stable/nfs-server-provisioner/templates/statefulset.yaml | 4 ++++ 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/stable/nfs-server-provisioner/Chart.yaml b/stable/nfs-server-provisioner/Chart.yaml index 1450d6c033..f75adc8d19 100644 --- a/stable/nfs-server-provisioner/Chart.yaml +++ b/stable/nfs-server-provisioner/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v1 appVersion: 2.3.0 description: nfs-server-provisioner is an out-of-tree dynamic provisioner for Kubernetes. You can use it to quickly & easily deploy shared storage that works almost anywhere. name: nfs-server-provisioner -version: 1.0.0 +version: 1.1.0 maintainers: - name: kiall email: kiall@macinnes.ie diff --git a/stable/nfs-server-provisioner/README.md b/stable/nfs-server-provisioner/README.md index 0c30e923ec..7dc051eb17 100644 --- a/stable/nfs-server-provisioner/README.md +++ b/stable/nfs-server-provisioner/README.md @@ -82,6 +82,7 @@ their default values. | `nodeSelector` | Map of node labels for pod assignment | `{}` | | `tolerations` | List of node taints to tolerate | `[]` | | `affinity` | Map of node/pod affinities | `{}` | +| `podSecurityContext` | Security context settings for nfs-server-provisioner pod (see https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod) | `{}` | ```console $ helm install stable/nfs-server-provisioner --name my-release \ diff --git a/stable/nfs-server-provisioner/templates/statefulset.yaml b/stable/nfs-server-provisioner/templates/statefulset.yaml index 0c03609917..a405163c67 100644 --- a/stable/nfs-server-provisioner/templates/statefulset.yaml +++ b/stable/nfs-server-provisioner/templates/statefulset.yaml @@ -99,6 +99,10 @@ spec: resources: {{- toYaml . | nindent 12 }} {{- end }} + {{- with .Values.podSecurityContext }} + securityContext: + {{- toYaml . | nindent 8 }} + {{- end }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }}