Merge pull request #27 from danquack/security-context

move security context to values file

Author: olhado

templates/daemonset.yaml

@@ -99,7 +99,7 @@ spec:
                 name: {{ include "threatstack-agent.name" . }}-config-args
                 key: config-args
         securityContext:
-          privileged: false
+          {{- toYaml .Values.daemonset.securityContext | nindent 10 }}
           capabilities:
             add: {{ .Values.capabilities | trim }}
 {{- if .Values.daemonset.resources }}

templates/deployment-api-reader.yaml

@@ -82,7 +82,7 @@ spec:
                 name: {{ include "threatstack-agent.name" . }}-config-args
                 key: kubernetes-api-config-args
         securityContext:
-          privileged: false
+          {{- toYaml .Values.apiReader.securityContext | nindent 10 }}
           capabilities:
             add: {{ .Values.capabilities | trim }}
 {{- if .Values.apiReader.resources }}

values.yaml

@@ -119,7 +119,6 @@ apiReader:
   #    limits:
   #      memory: "512Mi"
   #      cpu: "400m"
-
   # Override kubernetes api reader agent's default target nodes
   # Default is any node within the target namespace
   #
@@ -132,6 +131,9 @@ apiReader:
   # Optional
   tolerations: []
 
+  securityContext:
+    privileged: false
+
 ########
 #
 # Threat Stack Agent Daemonset settings
@@ -240,4 +242,7 @@ daemonset:
   #     bar
   #     the end
   #
-  customLuaFilter: ""
+  customLuaFilter: ""
+
+  securityContext:
+    privileged: false