opa: add extraArgs to opa container (#23556)

Signed-off-by: Nandor Kracser <bonifaido@gmail.com>

stable/opa/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 1.14.1
+version: 1.14.2
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

stable/opa/README.md

@@ -95,6 +95,7 @@ Reference](https://www.openpolicyagent.org/docs/configuration.html).
 | `timeoutSeconds` | Timeout for a webhook call in seconds. | `` |
 | `securityContext` | Security context for the containers | `{enabled: false, runAsNonRoot: true, runAsUser: 1}` |
 | `deploymentStrategy` | Specify deployment spec rollout strategy | `{}` |
+| `extraArgs` | Additional arguments to be added to the opa container | `[]` |
 | `extraContainers` | Additional containers to be added to the deployment | `[]` |
 | `extraVolumes` | Additional volumes to be added to the deployment | `[]` |
 | `extraPorts` | Additional ports to OPA service. Useful to expose `extraContainer` ports. | `[]` |

stable/opa/templates/deployment.yaml

@@ -104,6 +104,9 @@ spec:
 {{- end }}
 {{- if or .Values.authz.enabled .Values.bootstrapPolicies }}
             - "/bootstrap"
+{{- end }}
+{{- range .Values.extraArgs }}
+            - {{ . }}
 {{- end }}
           volumeMounts:
             - name: certs

stable/opa/values.yaml

@@ -114,6 +114,8 @@ imagePullPolicy: IfNotPresent
 # and livenessProbe
 port: 443
 
+extraArgs: []
+
 mgmt:
   enabled: true
   image: openpolicyagent/kube-mgmt