Improve init container (#1251)

<!--
### Contribution Checklist
  
- Name the pull request in the form "[charts/<chart-name>] Title of the
pull request".
Skip *[charts/<chart-name>]* if the PR doesn't change a specific chart.
E.g. `[docs] Fix typo in README`.

- Fill out the template below to describe the changes contributed by the
pull request. That will give reviewers the context they need to do the
review.
  
- Each pull request should address only one issue, not mix up code from
multiple issues.
  
  - Each commit in the pull request has a meaningful commit message

- Once all items of the checklist are addressed, remove the above text
and this checklist, leaving only the filled out template below.

**(The sections below can be removed for hotfixes of typos)**
-->

*(If this PR fixes a github issue, please add `Fixes #<xyz>`.)*

Fixes #<xyz>

*(or if this PR is one task of a github issue, please add `Master Issue:
#<xyz>` to link to the master issue.)*

Master Issue: #<xyz>

### Motivation

*Explain here the context, and why you're making that change. What is
the problem you're trying to solve.*

### Modifications

*Describe the modifications you've done.*

### Verifying this change

- [ ] Make sure that the change passes the CI checks.

*(Please pick either of the following options)*

This change is a trivial rework / code cleanup without any test
coverage.

*(or)*

This change is already covered by existing tests, such as *(please
describe tests)*.

*(or)*

This change added tests and can be verified as follows:

*(example:)*
- *Added integration tests for end-to-end deployment with large payloads
(10MB)*
  - *Extended integration test for recovery after broker failure*

### Documentation

Check the box below.

Need to update docs? 

- [ ] `doc-required` 
  
  (If you need help on updating docs, create a doc issue)
  
- [ ] `no-need-doc` 
  
  (Please explain why)
  
- [ ] `doc` 
  
  (If this PR contains doc changes)

Author: labuladong

charts/sn-platform-slim/templates/bookkeeper/bookkeeper-cluster.yaml

@@ -364,6 +364,12 @@ spec:
                     env;
                     {{- end }}
                     bin/pulsar-metadata-tool cleanup
+                {{- if .Values.bookkeeper.initContainerSecurityContext }}
+                securityContext: {{- toYaml .Values.bookkeeper.initContainerSecurityContext | nindent 16 }}
+                {{- end }}
+                {{- if .Values.bookkeeper.resources }}
+                resources: {{- toYaml .Values.bookkeeper.resources | nindent 16 }}
+                {{- end }}
                 env:
                 - name: METADATA_TOOL_CONF
                   value: "/pulsar-metadata-tool/conf/pulsar-metadata-tool/pulsar-metadata-tool.properties"

charts/sn-platform-slim/templates/zookeeper/zookeeper-cluster.yaml

@@ -71,6 +71,9 @@ spec:
       - name: "{{ template "pulsar.fullname" . }}-{{ .Values.zookeeper.component }}-{{ .Values.zookeeper.customTools.restore.component }}"
         image: "{{ .Values.images.zookeeper.customTools.restore.repository }}:{{ .Values.images.zookeeper.customTools.restore.tag }}"
         imagePullPolicy: {{ .Values.zookeeper.customTools.restore.pullPolicy }}
+        {{- if .Values.zookeeper.initContainerSecurityContext }}
+        securityContext: {{- toYaml .Values.zookeeper.initContainerSecurityContext | nindent 10 }}
+        {{- end }}
         command: ["sh", "-c"]
         args:
           - >

charts/sn-platform-slim/values.yaml

@@ -639,6 +639,7 @@ zookeeper:
   advanced: {}
   securityContext:
     runAsNonRoot: true
+  initContainerSecurityContext: {}
   tolerations: []
   gracePeriod: 30
   # Resources requests/limits for both init containers and app containers
@@ -888,6 +889,7 @@ bookkeeper:
   annotations: {}
   securityContext:
     runAsNonRoot: true
+  initContainerSecurityContext: {}
   tolerations: []
   gracePeriod: 30
   # The minimum number of seconds for new pods to be ready.

charts/sn-platform/templates/bookkeeper/bookkeeper-cluster.yaml

@@ -364,6 +364,12 @@ spec:
                     env;
                     {{- end }}
                     bin/pulsar-metadata-tool cleanup
+                {{- if .Values.bookkeeper.initContainerSecurityContext }}
+                securityContext: {{- toYaml .Values.bookkeeper.initContainerSecurityContext | nindent 16 }}
+                {{- end }}
+                {{- if .Values.bookkeeper.resources }}
+                resources: {{- toYaml .Values.bookkeeper.resources | nindent 16 }}
+                {{- end }}
                 env:
                 - name: METADATA_TOOL_CONF
                   value: "/pulsar-metadata-tool/conf/pulsar-metadata-tool/pulsar-metadata-tool.properties"

charts/sn-platform/templates/zookeeper/zookeeper-cluster.yaml

@@ -71,6 +71,9 @@ spec:
       - name: "{{ template "pulsar.fullname" . }}-{{ .Values.zookeeper.component }}-{{ .Values.zookeeper.customTools.restore.component }}"
         image: "{{ .Values.images.zookeeper.customTools.restore.repository }}:{{ .Values.images.zookeeper.customTools.restore.tag }}"
         imagePullPolicy: {{ .Values.zookeeper.customTools.restore.pullPolicy }}
+        {{- if .Values.zookeeper.initContainerSecurityContext }}
+        securityContext: {{- toYaml .Values.zookeeper.initContainerSecurityContext | nindent 10 }}
+        {{- end }}
         command: ["sh", "-c"]
         args:
           - >

charts/sn-platform/values.yaml

@@ -714,6 +714,7 @@ zookeeper:
   advanced: {}
   securityContext:
     runAsNonRoot: true
+  initContainerSecurityContext: {}
   tolerations: []
   gracePeriod: 30
   # Resources requests/limits for both init containers and app containers
@@ -963,6 +964,7 @@ bookkeeper:
   annotations: {}
   securityContext:
     runAsNonRoot: true
+  initContainerSecurityContext: {}
   tolerations: []
   gracePeriod: 30
   # The minimum number of seconds for new pods to be ready.