Skip to content

Commit 0b2c794

Browse files
committed
add securityContext to helm chart
Signed-off-by: Jan Jansen <[email protected]>
1 parent ee8cb7c commit 0b2c794

File tree

2 files changed

+6
-0
lines changed

2 files changed

+6
-0
lines changed

deploy/helm/templates/generated/Deployment-clickhouse-operator.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -113,6 +113,7 @@ spec:
113113
resource: limits.memory
114114
{{ with .Values.operator.env }}{{ toYaml . | nindent 12 }}{{ end }}
115115
resources: {{ toYaml .Values.operator.resources | nindent 12 }}
116+
securityContext: {{ toYaml .Values.operator.containerSecurityContext | nindent 12 }}
116117
{{ if .Values.metrics.enabled }}
117118
- name: metrics-exporter
118119
image: {{ .Values.metrics.image.repository }}:{{ include "altinity-clickhouse-operator.metrics.tag" . }}
@@ -182,8 +183,10 @@ spec:
182183
- containerPort: 8888
183184
name: metrics
184185
resources: {{ toYaml .Values.metrics.resources | nindent 12 }}
186+
securityContext: {{ toYaml .Values.metrics.containerSecurityContext | nindent 12 }}
185187
{{ end }}
186188
imagePullSecrets: {{ toYaml .Values.imagePullSecrets | nindent 8 }}
187189
nodeSelector: {{ toYaml .Values.nodeSelector | nindent 8 }}
188190
affinity: {{ toYaml .Values.affinity | nindent 8 }}
191+
securityContext: {{ toYaml .Values.podSecurityContext | nindent 12 }}
189192
tolerations: {{ toYaml .Values.tolerations | nindent 8 }}

deploy/helm/values.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ operator:
88
# operator.image.pullPolicy -- image pull policy
99

1010
pullPolicy: IfNotPresent
11+
containerSecurityContext: {}
1112
# operator.resources -- custom resource configuration
1213

1314
resources: {}
@@ -39,6 +40,7 @@ metrics:
3940
# metrics.image.pullPolicy -- image pull policy
4041

4142
pullPolicy: IfNotPresent
43+
containerSecurityContext: {}
4244
# metrics.resources -- custom resource configuration
4345

4446
resources: {}
@@ -99,6 +101,7 @@ tolerations: []
99101
# affinity -- affinity for scheduler pod assignment
100102

101103
affinity: {}
104+
podSecurityContext: {}
102105
serviceMonitor:
103106
# serviceMonitor.enabled -- ServiceMonitor CRD is created for a prometheus operator
104107
enabled: false

0 commit comments

Comments
 (0)