Skip to content

Commit da8c91d

Browse files
committed
[#9646] securityContext initContainers
- fixes #9646 - use renderSecurityContext for initContainers
1 parent d8a078a commit da8c91d

1 file changed

Lines changed: 6 additions & 36 deletions

File tree

pkg/helm/templates/deployment.yaml

Lines changed: 6 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -192,24 +192,9 @@ spec:
192192
limits:
193193
cpu: 50m
194194
memory: 64Mi
195-
securityContext:
196-
seLinuxOptions: {}
197-
runAsUser: 1001
198-
runAsGroup: 1001
199-
runAsNonRoot: true
200-
privileged: false
201-
readOnlyRootFilesystem: true
202-
allowPrivilegeEscalation: false
203-
capabilities:
204-
drop: ["ALL"]
205-
seccompProfile:
206-
type: RuntimeDefault
207-
{{- if .Values.global.compatibility.appArmor.enabled }}
208-
appArmorProfile:
209-
type: RuntimeDefault
210-
{{- end }}
211-
windowsOptions:
212-
hostProcess: false
195+
{{- if .Values.containerSecurityContext.enabled }}
196+
securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.containerSecurityContext "context" .) | nindent 12 }}
197+
{{- end }}
213198
- name: unset-python3-cli-net-cap
214199
image: {{ template "pgadmin4.image" . }}
215200
imagePullPolicy: {{ .Values.image.pullPolicy }}
@@ -226,21 +211,6 @@ spec:
226211
limits:
227212
cpu: 50m
228213
memory: 64Mi
229-
securityContext:
230-
seLinuxOptions: {}
231-
runAsUser: 1001
232-
runAsGroup: 1001
233-
runAsNonRoot: true
234-
privileged: false
235-
readOnlyRootFilesystem: true
236-
allowPrivilegeEscalation: false
237-
capabilities:
238-
drop: ["ALL"]
239-
seccompProfile:
240-
type: RuntimeDefault
241-
{{- if .Values.global.compatibility.appArmor.enabled }}
242-
appArmorProfile:
243-
type: RuntimeDefault
244-
{{- end }}
245-
windowsOptions:
246-
hostProcess: false
214+
{{- if .Values.containerSecurityContext.enabled }}
215+
securityContext: {{- include "renderSecurityContext" (dict "securityContext" .Values.containerSecurityContext "context" .) | nindent 12 }}
216+
{{- end }}

0 commit comments

Comments
 (0)