From e38d153fe7f8999beab794798969fbde2d929d86 Mon Sep 17 00:00:00 2001
From: Silvan Loser <33911078+losil@users.noreply.github.com>
Date: Sat, 2 Apr 2022 10:34:38 +0200
Subject: [PATCH] adding value containerSecurityContext to helm chart #521

---
 charts/kured/Chart.yaml               | 2 +-
 charts/kured/templates/daemonset.yaml | 2 +-
 charts/kured/values.yaml              | 4 ++++
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/charts/kured/Chart.yaml b/charts/kured/Chart.yaml
index d860b39..99a0126 100644
--- a/charts/kured/Chart.yaml
+++ b/charts/kured/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: "1.9.2"
 description: A Helm chart for kured
 name: kured
-version: 2.12.1
+version: 2.12.2
 home: https://github.com/weaveworks/kured
 maintainers:
   - name: ckotzbauer
diff --git a/charts/kured/templates/daemonset.yaml b/charts/kured/templates/daemonset.yaml
index c0474cc..fada94f 100644
--- a/charts/kured/templates/daemonset.yaml
+++ b/charts/kured/templates/daemonset.yaml
@@ -50,7 +50,7 @@ spec:
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           securityContext:
-            privileged: true # Give permission to nsenter /proc/1/ns/mnt
+{{ toYaml .Values.containerSecurityContext | indent 12 }}
           resources:
 {{ toYaml .Values.resources | indent 12 }}
           command:
diff --git a/charts/kured/values.yaml b/charts/kured/values.yaml
index 20001fb..e0f30d5 100644
--- a/charts/kured/values.yaml
+++ b/charts/kured/values.yaml
@@ -63,6 +63,10 @@ serviceAccount:
 podSecurityPolicy:
   create: false
 
+containerSecurityContext:
+  privileged: true # Give permission to nsenter /proc/1/ns/mnt
+#  allowPrivilegeEscalation: true # Needed when using defaultAllowPrivilegedEscalation: false in psp
+
 resources: {}
 
 metrics: