Skip to content

Latest commit

 

History

History
34 lines (32 loc) · 952 Bytes

security_context.md

File metadata and controls

34 lines (32 loc) · 952 Bytes
Raw

SecurityContext

We provide a field securityContext in CRD to define privilege and access control settings for nebula Container. The securityContext field is a SecurityContext object. Security settings that you specify for a nebula Container will not affect other containers.

Here is the configuration file for Graphd which have a securityContext field:

apiVersion: apps.nebula-graph.io/v1alpha1
kind: NebulaCluster
metadata:
  name: nebula
  namespace: default
spec:
  graphd:
    securityContext:
      capabilities:
        add: ["SYS_ADMIN"]
    resources:
      requests:
        cpu: "200m"
        memory: "500Mi"
      limits:
        cpu: "1"
        memory: "1Gi"
    logVolumeClaim:
      resources:
        requests:
          storage: 1Gi
      storageClassName: local-path
    replicas: 1
    image: vesoft/nebula-graphd
    version: v3.6.0