Merge pull request #11 from nipsufn/feat/podsecuritycontext

feat: add pod level security context
rueian · Apr 11, 2024 · d60f62f · d60f62f
2 parents 1a7aa96 + 3c2ff4c
commit d60f62f
Show file tree

Hide file tree

Showing 4 changed files with 15 additions and 0 deletions.
diff --git a/helm/hubble-gke-exporter/templates/daemonset-exporter.yaml b/helm/hubble-gke-exporter/templates/daemonset-exporter.yaml
@@ -33,6 +33,10 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- with .Values.exporter.spec.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: gke-hubble-export
           image: "{{ .Values.exporter.image.repository }}:{{ .Values.exporter.image.tag }}"

diff --git a/helm/hubble-gke-exporter/templates/deployment-relay.yaml b/helm/hubble-gke-exporter/templates/deployment-relay.yaml
@@ -25,6 +25,10 @@ spec:
         {{- end }}
         {{- include "hubble-gke-exporter.labels" . | nindent 8 }}
     spec:
+      {{- with .Values.exporter.spec.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: hubble-relay
           image: "{{ .Values.relay.image.repository }}:v{{ .Chart.AppVersion }}"

diff --git a/helm/hubble-gke-exporter/templates/deployment-ui.yaml b/helm/hubble-gke-exporter/templates/deployment-ui.yaml
@@ -25,6 +25,10 @@ spec:
         {{- end }}
         {{- include "hubble-gke-exporter.labels" . | nindent 8 }}
     spec:
+      {{- with .Values.exporter.spec.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       serviceAccount: {{ include "hubble-gke-exporter.fullname" . }}-ui
       serviceAccountName: {{ include "hubble-gke-exporter.fullname" . }}-ui
       containers:

diff --git a/helm/hubble-gke-exporter/values.yaml b/helm/hubble-gke-exporter/values.yaml
@@ -15,6 +15,7 @@ exporter:
         operator: Exists
     podLabels: {}
     podAnnotations: {}
+    podSecurityContext: {}
     securityContext: {}
 
 ui:
@@ -43,6 +44,7 @@ ui:
     replicas: 1
     podLabels: {}
     podAnnotations: {}
+    podSecurityContext: {}
 
 relay:
   image:
@@ -52,6 +54,7 @@ relay:
     replicas: 1
     podLabels: {}
     podAnnotations: {}
+    podSecurityContext: {}
     securityContext: {}
 
 service: