take statefulset pod annotations from Helm values

Chart.yaml

@@ -1,7 +1,7 @@
 ---
 apiVersion: v2
 name: nifi
-version: 0.4.3
+version: 0.4.4
 appVersion: 1.11.4
 description: Apache NiFi is a software project from the Apache Software Foundation designed to automate the flow of data between software systems.
 keywords:

README.md

@@ -83,6 +83,7 @@ The following table lists the configurable parameters of the nifi chart and the
 | **sts**                                                                     |
 | `sts.podManagementPolicy`                                                   | Parallel podManagementPolicy                                                                                       | `Parallel`                      |
 | `sts.AntiAffinity`                                                          | Affinity for pod assignment                                                                                        | `soft`                          |
+| `sts.pod.annotations`                                                       | Pod template annotations                                                                                           | `security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000`                          |
 | **secrets**
 | `secrets`                                                                   | Pass any secrets to the nifi pods. The secret can also be mounted to a specific path if required.                  | `nil`                           |
 | **configmaps**

templates/statefulset.yaml

@@ -18,8 +18,13 @@ spec:
       release: {{ .Release.Name }}
   template:
     metadata:
+{{- if .Values.sts.pod.annotations }}
+      annotations:
+{{ toYaml .Values.sts.pod.annotations | indent 8 }}
+{{- else }}
       annotations:
         security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000
+{{- end }}
       labels:
         app: {{ include "apache-nifi.name" . | quote }}
         chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}"

values.yaml

@@ -25,6 +25,10 @@ sts:
   podManagementPolicy: Parallel
   AntiAffinity: soft
   hostPort: null
+  pod:
+    annotations:
+      security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000
+      #prometheus.io/scrape: "true"      
 
 ## Useful if using any custom secrets
 ## Pass in some secrets to use (if required)