expose securityContext

2026-08-23 22:46:35 +00:00 · 2023-03-01 11:14:59 +08:00
parent e51e8b831f
commit 12965c4660
3 changed files with 12 additions and 14 deletions
@@ -81,13 +81,7 @@ spec:
              resources:
                {{- toYaml .Values.resources | nindent 16 }}
              securityContext:
-                allowPrivilegeEscalation: false
-                capabilities:
-                  drop:
-                    - ALL
-                privileged: false
-                readOnlyRootFilesystem: true
-                runAsNonRoot: true
+                {{- toYaml .Values.securityContext | nindent 16 }}
              volumeMounts:
                - mountPath: /policy-dir
                  name: policy-volume
@@ -65,13 +65,7 @@ spec:
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
-            privileged: false
-            readOnlyRootFilesystem: true
-            runAsNonRoot: true
+            {{- toYaml .Values.securityContext | nindent 12 }}
          volumeMounts:
            - mountPath: /policy-dir
              name: policy-volume
@@ -22,6 +22,16 @@ resources:
  #   cpu: 100m
  #   memory: 128Mi

+securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+  privileged: false
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 1000
+
 nameOverride: ""
 fullnameOverride: ""