Merge pull request #248 from sergelogvinov/container-sec

CLOUD-838 - Fix backup pod-containerSecurityContext
percona · Jan 31, 2024 · 2f94d3a · 2f94d3a
2 parents 9d9d3d1 + 741213b
commit 2f94d3a
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 4 deletions.
diff --git a/charts/psmdb-db/Chart.yaml b/charts/psmdb-db/Chart.yaml
@@ -3,7 +3,7 @@ appVersion: "1.15.0"
 description: A Helm chart for installing Percona Server MongoDB Cluster Databases using the PSMDB Operator.
 name: psmdb-db
 home: https://www.percona.com/doc/kubernetes-operator-for-psmongodb/index.html
-version: 1.15.1
+version: 1.15.2
 maintainers:
   - name: tplavcic
     email: [email protected]

diff --git a/charts/psmdb-db/README.md b/charts/psmdb-db/README.md
@@ -214,6 +214,8 @@ The chart can be customized using the following configurable parameters:
 | |
 | `backup.enabled`            | Enable backup PBM agent                  | `true`                                |
 | `backup.annotations`        | Backup job annotations                   | `{}`                                  |
+| `backup.podSecurityContext` | Set the security context for a Pod       | `{}`                                  |
+| `backup.containerSecurityContext` | Set the security context for a Container | `{}`                                  |
 | `backup.restartOnFailure`   | Backup Pods restart policy               | `true`                                |
 | `backup.image.repository`   | PBM Container image repository           | `percona/percona-backup-mongodb`      |
 | `backup.image.tag`          | PBM Container image tag                  | `2.3.0`                               |

diff --git a/charts/psmdb-db/templates/cluster.yaml b/charts/psmdb-db/templates/cluster.yaml
@@ -538,6 +538,14 @@ spec:
     {{- if .Values.backup.annotations }}
     annotations:
 {{ .Values.backup.annotations | toYaml | indent 6 }}
+    {{- end }}
+    {{- if .Values.backup.podSecurityContext }}
+    podSecurityContext:
+{{ .Values.backup.podSecurityContext | toYaml | indent 6 }}
+    {{- end }}
+    {{- if .Values.backup.containerSecurityContext }}
+    containerSecurityContext:
+{{ .Values.backup.containerSecurityContext | toYaml | indent 6 }}
     {{- end }}
     image: "{{ .Values.backup.image.repository }}:{{ .Values.backup.image.tag }}"
     serviceAccountName: {{ .Values.backup.serviceAccountName }}

diff --git a/charts/psmdb-db/values.yaml b/charts/psmdb-db/values.yaml
@@ -102,6 +102,8 @@ replsets:
     # priorityClass: ""
     # annotations: {}
     # labels: {}
+    # podSecurityContext: {}
+    # containerSecurityContext: {}
     # nodeSelector: {}
     # livenessProbe:
     #   failureThreshold: 4
@@ -180,7 +182,7 @@ replsets:
       #   - 10.0.0.0/8
       # serviceAnnotations:
       #   service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-      # serviceLabels: 
+      # serviceLabels:
       #   some-label: some-key
     # schedulerName: ""
     resources:
@@ -326,6 +328,8 @@ sharding:
     # priorityClass: ""
     # annotations: {}
     # labels: {}
+    # podSecurityContext: {}
+    # containerSecurityContext: {}
     # nodeSelector: {}
     # livenessProbe: {}
     # readinessProbe: {}
@@ -349,7 +353,7 @@ sharding:
       #   - 10.0.0.0/8
       # serviceAnnotations:
       #   service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-      # serviceLabels: 
+      # serviceLabels:
       #   some-label: some-key
     resources:
       limits:
@@ -409,6 +413,8 @@ sharding:
     # priorityClass: ""
     # annotations: {}
     # labels: {}
+    # podSecurityContext: {}
+    # containerSecurityContext: {}
     # nodeSelector: {}
     # livenessProbe: {}
     # readinessProbe: {}
@@ -439,7 +445,7 @@ sharding:
       #   - 10.0.0.0/8
       # serviceAnnotations:
       #   service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
-      # serviceLabels: 
+      # serviceLabels:
       #   some-label: some-key
     # auditLog:
     #   destination: file
@@ -459,6 +465,8 @@ backup:
   serviceAccountName: percona-server-mongodb-operator
   # annotations:
   #   iam.amazonaws.com/role: role-arn
+  # podSecurityContext: {}
+  # containerSecurityContext: {}
   # resources:
   #   limits:
   #     cpu: "300m"