feat: Add Helm configuration for pod security context

grafana · Oct 2, 2024 · 8bd589c · 8bd589c
1 parent 5b84331
commit 8bd589c
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 1 deletion.
diff --git a/charts/k6-operator/README.md b/charts/k6-operator/README.md
@@ -38,6 +38,7 @@ Kubernetes: `>=1.16.0-0`
 | customLabels | object | `{}` | Custom Label to be applied on all resources |
 | global.image.pullSecrets | list | `[]` | Optional set of global image pull secrets |
 | global.image.registry | string | `""` | Global image registry to use if it needs to be overridden for some specific use cases (e.g local registries, custom images, ...) |
+| global.podSecurityContext | object | `{}` | A security context defines privileges and access control settings for a Pod |
 | installCRDs | bool | `true` | Installs CRDs as part of the release |
 | manager.containerSecurityContext | object | `{}` | A security context defines privileges and access control settings for the container. |
 | manager.env | object | `{}` | Environment variables to be applied on the controller |
@@ -63,4 +64,4 @@ Kubernetes: `>=1.16.0-0`
 | tolerations | object | `{}` | Tolerations to be applied on all containers |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs v1.11.3](https://github.com/norwoodj/helm-docs/releases/v1.11.3)
+Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)
diff --git a/charts/k6-operator/templates/deployment.yaml b/charts/k6-operator/templates/deployment.yaml
@@ -26,6 +26,10 @@ spec:
         {{- include "k6-operator.podAnnotations" . | default "" | nindent 8 }}
       {{- end }}
     spec:
+      {{- if .Values.global.podSecurityContext }}
+      securityContext:
+        {{- toYaml .Values.global.podSecurityContext | nindent 8 }}
+      {{- end }}
       containers:
         - name: manager
           image: "{{ .Values.global.image.registry | default .Values.manager.image.registry }}/{{ .Values.manager.image.repository }}:{{ .Values.manager.image.tag }}"

diff --git a/charts/k6-operator/values.yaml b/charts/k6-operator/values.yaml
@@ -14,6 +14,13 @@ global:
     # global.image.pullSecrets -- Optional set of global image pull secrets
     pullSecrets: []
 
+  # @schema
+  # required: false
+  # type: object
+  # @schema
+  # global.podSecurityContext -- A security context defines privileges and access control settings for a Pod
+  podSecurityContext: {}
+
 # @schema
 # required: false
 # type: object