feat: add spec.template.spec.securityContext (#1109)

* feat: add spec.template.spec.securityContext Signed-off-by: ChristianBieri1995 <[email protected]> * make securityContext adjustable Signed-off-by: ChristianBieri1995 <[email protected]> * adjust values.yaml accordingly to enable adjustable securityContext Signed-off-by: ChristianBieri1995 <[email protected]> * Remove default values from securityContext Signed-off-by: ChristianBieri1995 <[email protected]> --------- Signed-off-by: ChristianBieri1995 <[email protected]> Co-authored-by: Aris Boutselis <[email protected]> Co-authored-by: Alex Jones <[email protected]>
k8sgpt-ai · Jun 14, 2024 · 92dd1bd · 92dd1bd
1 parent 4867d39
commit 92dd1bd
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/charts/k8sgpt/templates/deployment.yaml b/charts/k8sgpt/templates/deployment.yaml
@@ -21,6 +21,10 @@ spec:
         app.kubernetes.io/name: {{ include "k8sgpt.name" . }}
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.deployment.securityContext }}
+      securityContext:
+        {{- toYaml .Values.deployment.securityContext | nindent 8 }}
+      {{ end -}}
       serviceAccountName: {{ template "k8sgpt.fullname" . }}
       containers:
       - name: k8sgpt-container

diff --git a/charts/k8sgpt/values.yaml b/charts/k8sgpt/values.yaml
@@ -14,7 +14,10 @@ deployment:
     requests:
       cpu: "0.2"
       memory: "156Mi"
-
+  securityContext: {}
+  # Set securityContext.runAsUser/runAsGroup if necessary. Values below were taken from https://github.com/k8sgpt-ai/k8sgpt/blob/main/container/Dockerfile
+  # runAsUser: 65532
+  # runAsGroup: 65532
 secret:
   secretKey: "" # base64 encoded OpenAI token