Make securityContext (pod and container) configurable

eclipse-tractusx · Jan 31, 2024 · 8af03a1 · 8af03a1
1 parent f438fe9
commit 8af03a1
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 4 deletions.
diff --git a/charts/registry/Chart.yaml b/charts/registry/Chart.yaml
@@ -26,7 +26,7 @@ sources:
   - https://github.com/eclipse-tractusx/sldt-digital-twin-registry
 
 type: application
-version: 0.4.1
+version: 0.4.2
 appVersion: 0.3.23
 
 dependencies:

diff --git a/charts/registry/templates/registry/registry-deployment.yaml b/charts/registry/templates/registry/registry-deployment.yaml
@@ -35,14 +35,13 @@ spec:
         {{- include "dtr.selectorLabels" . | nindent 8 }}
     spec:
       securityContext:
-        runAsUser: 100
+        {{- toYaml .Values.registry.podSecurityContext | nindent 8 }}
       containers:
         - name: {{ .Chart.Name }}
           image: {{ .Values.registry.image.registry }}/{{ .Values.registry.image.repository }}:{{ .Values.registry.image.version | default .Chart.AppVersion }}
           imagePullPolicy: {{ .Values.registry.imagePullPolicy }}
           securityContext:
-            runAsUser: 100
-            allowPrivilegeEscalation: false
+            {{- toYaml .Values.registry.securityContext | nindent 12 }}
           {{- if not .Values.registry.authentication }}
           args: ["--spring.profiles.active=local"]
           {{- end }}

diff --git a/charts/registry/values.yaml b/charts/registry/values.yaml
@@ -88,6 +88,11 @@ registry:
     requests:
       cpu: 250m
       memory: 1024Mi
+  podSecurityContext:
+    runAsUser: 100
+  securityContext:
+    runAsUser: 100
+    allowPrivilegeEscalation: false
 
 postgresql:
   primary: