Job Cronjob security context (#1331)

* added security context in CronJob manifest

* added security context in Job manifest

* added security context in test_values

* added security context in app_values

Author: pawan-59

scripts/devtron-reference-helm-charts/cronjob-chart_1-2-0/app-values.yaml

@@ -237,3 +237,11 @@ envoyproxy:
 imagePullSecrets: []
   # - test1
   # - test2
+
+containerSecurityContext:
+  allowPrivilegeEscalation: false
+
+podSecurityContext: {}
+  # runAsUser: 1000
+  # runAsGroup: 3000
+  # fsGroup: 2000

scripts/devtron-reference-helm-charts/cronjob-chart_1-2-0/templates/Cronjob.yaml

@@ -87,6 +87,10 @@ spec:
           tolerations:
     {{- toYaml .Values.tolerations | nindent 12 }}
       {{- end }}
+{{- if $.Values.podSecurityContext }}
+          securityContext:
+{{ toYaml .Values.podSecurityContext | indent 12 }}
+{{- end }}
     {{- if $.Values.imagePullSecrets}}
           imagePullSecrets:
       {{- range .Values.imagePullSecrets }}
@@ -149,6 +153,15 @@ spec:
               securityContext:
                 privileged: true
     {{- end}}
+{{- if $.Values.containerSecurityContext }}
+              securityContext:
+{{ toYaml .Values.containerSecurityContext | indent 16 }}
+{{- end }}
+{{- if and $.Values.containerSecurityContext $.Values.privileged }}
+              securityContext:
+                privileged: true
+{{ toYaml .Values.containerSecurityContext | indent 16 }}
+{{- end }}
               ports:
               {{- range $.Values.ContainerPort }}
                 - name: {{ .name}}

scripts/devtron-reference-helm-charts/cronjob-chart_1-2-0/templates/job.yaml

@@ -82,6 +82,10 @@ spec:
       tolerations:
 {{ toYaml .Values.tolerations | indent 8 }}
   {{- end }}
+{{- if $.Values.podSecurityContext }}
+      securityContext:
+{{ toYaml .Values.podSecurityContext | indent 8 }}
+{{- end }}
 {{- if $.Values.imagePullSecrets}}
       imagePullSecrets:
   {{- range .Values.imagePullSecrets }}
@@ -144,6 +148,15 @@ spec:
           securityContext:
             privileged: true
 {{- end}}
+{{- if $.Values.containerSecurityContext }}
+          securityContext:
+{{ toYaml .Values.containerSecurityContext | indent 12 }}
+{{- end }}
+{{- if and $.Values.containerSecurityContext $.Values.privileged }}
+          securityContext:
+            privileged: true
+{{ toYaml .Values.containerSecurityContext | indent 12 }}
+{{- end }}
           ports:
           {{- range $.Values.ContainerPort }}
             - name: {{ .name}}

scripts/devtron-reference-helm-charts/cronjob-chart_1-2-0/test_values.yaml

@@ -423,3 +423,11 @@ podAnnotations:
 
 podLabels:
   severity: critical
+
+containerSecurityContext:
+  allowPrivilegeEscalation: false
+
+podSecurityContext: {}
+  # runAsUser: 1000
+  # runAsGroup: 3000
+  # fsGroup: 2000