@@ -60,6 +60,21 @@ their default values.
60
60
| ` podAnnotations ` | Annotations for pod | ` {} ` |
61
61
| ` podLabels ` | Labels for pod | ` {} ` |
62
62
| ` podDisruptionBudget ` | Pod disruption budget | ` {} ` |
63
+ | ` podSecurityContext.enabled ` | Enabled Keycloak pods' Security Context | ` true ` |
64
+ | ` podSecurityContext.fsGroupChangePolicy ` | Set filesystem group change policy | ` Always ` |
65
+ | ` podSecurityContext.sysctls ` | Set kernel settings using the sysctl interface | ` [] ` |
66
+ | ` podSecurityContext.supplementalGroups ` | Set filesystem extra groups | ` [] ` |
67
+ | ` podSecurityContext.fsGroup ` | Set Keycloak pod's Security Context fsGroup | ` 1001 ` |
68
+ | ` containerSecurityContext.enabled ` | Enabled containers' Security Context | ` true ` |
69
+ | ` containerSecurityContext.seLinuxOptions ` | Set SELinux options in container | ` {} ` |
70
+ | ` containerSecurityContext.runAsUser ` | Set containers' Security Context runAsUser | ` 1001 ` |
71
+ | ` containerSecurityContext.runAsGroup ` | Set containers' Security Context runAsGroup | ` 1001 ` |
72
+ | ` containerSecurityContext.runAsNonRoot ` | Set container's Security Context runAsNonRoot | ` true ` |
73
+ | ` containerSecurityContext.privileged ` | Set container's Security Context privileged | ` false ` |
74
+ | ` containerSecurityContext.readOnlyRootFilesystem ` | Set container's Security Context readOnlyRootFilesystem | ` true ` |
75
+ | ` containerSecurityContext.allowPrivilegeEscalation ` | Set container's Security Context allowPrivilegeEscalation | ` false ` |
76
+ | ` containerSecurityContext.capabilities.drop ` | List of capabilities to be dropped | ` ["ALL"] ` |
77
+ | ` containerSecurityContext.seccompProfile.type ` | Set container's Security Context seccomp profile | ` RuntimeDefault ` |
63
78
| ` resources.limits.cpu ` | Container requested CPU | ` nil ` |
64
79
| ` resources.limits.memory ` | Container requested memory | ` nil ` |
65
80
| ` autoscaling.enabled ` | Enable autoscaling using HorizontalPodAutoscaler | ` false ` |
0 commit comments