Kafka-connect helm chart securityContext support

charts/cp-kafka-connect/README.md

@@ -97,6 +97,13 @@ The configuration parameters in this section control the resources requested and
 | `imagePullPolicy` | Docker Image Tag of Confluent Kafka Connect. | `IfNotPresent` |
 | `imagePullSecrets` | Secrets to be used for private registries. | see [values.yaml](values.yaml) for details |
 
+### Security Context
+
+ Parameter | Description | Default |
+| --------- | ----------- | ------- |
+| `podSecurityContext` | securityContext for Pod [Kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod) | `{}`
+| `securityContext`| Security Context for container [Kubernetes documentation](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container) | `{}`
+
 ### Port
 
 | Parameter | Description | Default |

charts/cp-kafka-connect/templates/deployment.yaml

@@ -33,6 +33,8 @@ spec:
       {{- end }}
       {{- end }}
     spec:
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:
         {{- if .Values.prometheus.jmx.enabled }}
         - name: prometheus-jmx-exporter
@@ -69,6 +71,9 @@ spec:
             {{- end }}
           resources:
 {{ toYaml .Values.resources | indent 12 }}
+
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
           env:
             - name: CONNECT_REST_ADVERTISED_HOST_NAME
               valueFrom:

charts/cp-kafka-connect/values.yaml

@@ -133,3 +133,13 @@ livenessProbe:
   # initialDelaySeconds: 30
   # periodSeconds: 5
   # failureThreshold: 10
+
+podSecurityContext: {}
+  # runAsUser: 1000
+
+securityContext: {}
+  # capabilities:
+  #   drop:
+  #   - ALL
+  # runAsNonRoot: true
+  # runAsUser: 1000