diff --git a/charts/loadtester/README.md b/charts/loadtester/README.md index 4b482721d..f41b87d33 100644 --- a/charts/loadtester/README.md +++ b/charts/loadtester/README.md @@ -68,6 +68,8 @@ Parameter | Description | Default `istio.tls.enabled` | Enable TLS in gateway ( TLS secrets should be in namespace ) | `false` `istio.tls.httpsRedirect` | Redirect traffic to TLS port | `false` `podPriorityClassName` | PriorityClass name for pod priority configuration | "" +`securityContext.enabled` | Add securityContext to container | "" +`securityContext.context` | securityContext to add | "" Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade`. For example, diff --git a/charts/loadtester/templates/deployment.yaml b/charts/loadtester/templates/deployment.yaml index 978c7e504..f9b26604d 100644 --- a/charts/loadtester/templates/deployment.yaml +++ b/charts/loadtester/templates/deployment.yaml @@ -32,6 +32,10 @@ spec: {{- end }} containers: - name: {{ .Chart.Name }} + {{- if .Values.securityContext.enabled }} + securityContext: +{{ toYaml .Values.securityContext.context | indent 12 }} + {{- end }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} ports: diff --git a/charts/loadtester/values.yaml b/charts/loadtester/values.yaml index 100d61511..c089cc6d7 100644 --- a/charts/loadtester/values.yaml +++ b/charts/loadtester/values.yaml @@ -71,3 +71,11 @@ istio: tls: enabled: false httpsRedirect: false + +# when enabled, it will add a security context for the loadtester pod +securityContext: + enabled: false + context: + readOnlyRootFilesystem: true + runAsUser: 100 + runAsGroup: 101