github/podinfo
1
0
Fork 0
mirror of https://github.com/stefanprodan/podinfo.git synced 2026-08-23 22:26:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #382 from cthtrifork/feature/podSecurityContext
cve-scan / trivy (push) Failing after 9m22s
e2e / kind-helm (push) Failing after 1m14s
e2e / kind-timoni (push) Failing after 13s
test / test (push) Failing after 5m29s

Browse Source 
Added support for podSecurityContext in helm chart
This commit is contained in:
Stefan Prodan
2024-11-14 12:19:48 +02:00
committed by GitHub
parent dc5d3d559e e7928cfbc7
commit b99bf8c252
4 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/podinfo/README.md
+3 -2
View File
@@ -79,7 +79,7 @@ The following tables lists the configurable parameters of the podinfo chart and
| `service.grpcService` | `podinfo` | gPRC service name |
| `service.nodePort` | `31198` | NodePort for the HTTP endpoint |
| `h2c.enabled` | `false` | Allow upgrading to h2c (non-TLS version of HTTP/2) |
| `extraEnvs` | `[]` | Extra environment variables for the podinfo container |
| `extraEnvs` | `[]` | Extra environment variables for the podinfo container |
| `config.path` | `""` | config file path |
| `config.name` | `""` | config file name |
| `extraArgs` | `[]` | Additional command line arguments to pass to podinfo container |
@@ -92,12 +92,13 @@ The following tables lists the configurable parameters of the podinfo chart and
| `serviceAccount.name` | `None` | The name of the service account to use, if not set and create is true, a name is generated using the fullname template |
| `serviceAccount.imagePullSecrets` | `[]` | List of image pull secrets if pulling from private registries. |
| `securityContext` | `{}` | The security context to be set on the podinfo container |
| `podSecurityContext` | `{}` | The security context to be set on the pod |
| `linkerd.profile.enabled` | `false` | Create Linkerd service profile |
| `serviceMonitor.enabled` | `false` | Whether a Prometheus Operator service monitor should be created |
| `serviceMonitor.interval` | `15s` | Prometheus scraping interval |
| `serviceMonitor.additionalLabels` | `{}` | Add additional labels to the service monitor |
| `ingress.enabled` | `false` | Enables Ingress |
| `ingress.className ` | `""` | Use ingressClassName |
| `ingress.className` | `""` | Use ingressClassName |
| `ingress.additionalLabels` | `{}` | Add additional labels to the ingress |
| `ingress.annotations` | `{}` | Ingress annotations |
| `ingress.hosts` | `[]` | Ingress accepted hosts |
charts/podinfo/templates/deployment.yaml
+4
View File
@@ -195,6 +195,10 @@ spec:
{{- end }}
resources:
{{ toYaml .Values.resources | indent 12 }}
{{- with .Values.podSecurityContext }}
securityContext:
{{ toYaml . | indent 8 }}
{{- end }}
{{- with .Values.nodeSelector }}
nodeSelector:
{{ toYaml . | indent 8 }}
charts/podinfo/values-prod.yaml
+3
View File
@@ -107,6 +107,9 @@ serviceAccount:
# set container security context
securityContext: {}
# set pod security context
podSecurityContext: {}
ingress:
enabled: false
className: ""
charts/podinfo/values.yaml
+3
View File
@@ -111,6 +111,9 @@ serviceAccount:
# set container security context
securityContext: {}
# set pod security context
podSecurityContext: {}
ingress:
enabled: false
className: ""