Make securityContext (pod and container) configurable

eclipse-tractusx · Feb 13, 2024 · 3e35642 · 3e35642
1 parent 27e1ba6
commit 3e35642
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 6 deletions.
diff --git a/charts/registry/Chart.yaml b/charts/registry/Chart.yaml
@@ -1,6 +1,6 @@
 ###############################################################
-# Copyright (c) 2021, 2023, 2024 Robert Bosch Manufacturing Solutions GmbH
-# Copyright (c) 2021, 2023, 2024 Contributors to the Eclipse Foundation
+# Copyright (c) 2021, 2023 Robert Bosch Manufacturing Solutions GmbH
+# Copyright (c) 2021, 2023 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -26,7 +26,7 @@ sources:
   - https://github.com/eclipse-tractusx/sldt-digital-twin-registry
 
 type: application
-version: 0.4.2
+version: 0.4.3
 appVersion: 0.3.23
 
 dependencies:

diff --git a/charts/registry/templates/registry/registry-deployment.yaml b/charts/registry/templates/registry/registry-deployment.yaml
@@ -35,14 +35,13 @@ spec:
         {{- include "dtr.selectorLabels" . | nindent 8 }}
     spec:
       securityContext:
-        runAsUser: 100
+        {{- toYaml .Values.registry.podSecurityContext | nindent 8 }}
       containers:
         - name: {{ .Chart.Name }}
           image: {{ .Values.registry.image.registry }}/{{ .Values.registry.image.repository }}:{{ .Values.registry.image.version | default .Chart.AppVersion }}
           imagePullPolicy: {{ .Values.registry.imagePullPolicy }}
           securityContext:
-            runAsUser: 100
-            allowPrivilegeEscalation: false
+            {{- toYaml .Values.registry.securityContext | nindent 12 }}
           {{- if not .Values.registry.authentication }}
           args: ["--spring.profiles.active=local"]
           {{- end }}

diff --git a/charts/registry/values.yaml b/charts/registry/values.yaml
@@ -89,6 +89,11 @@ registry:
     requests:
       cpu: 250m
       memory: 1024Mi
+  podSecurityContext:
+    runAsUser: 100
+  securityContext:
+    runAsUser: 100
+    allowPrivilegeEscalation: false
 
 postgresql:
   primary: