Merge pull request #966 from afrimberger/feature/security-context-cle…

…anup-job

feat: add security context for cleanup hook

charts/k8up/Chart.yaml

@@ -6,7 +6,7 @@ keywords:
  - backup
  - operator
  - restic
-version: 4.7.0
+version: 4.8.0
 sources:
  - https://github.com/k8up-io/k8up
 maintainers:

charts/k8up/README.md

@@ -1,6 +1,6 @@
 # k8up
 
-![Version: 4.7.0](https://img.shields.io/badge/Version-4.7.0-informational?style=flat-square)
+![Version: 4.8.0](https://img.shields.io/badge/Version-4.8.0-informational?style=flat-square)
 
 Kubernetes and OpenShift Backup Operator based on restic
 
@@ -13,7 +13,7 @@ helm repo add k8up-io https://k8up-io.github.io/k8up
 helm install k8up k8up-io/k8up
 ```
 ```bash
-kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.7.0/k8up-crd.yaml
+kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.8.0/k8up-crd.yaml
 ```
 
 <!---

charts/k8up/templates/cleanup-hook.yaml

@@ -81,6 +81,8 @@ spec:
  spec:
  restartPolicy: Never
  serviceAccountName: cleanup-service-account
+ securityContext:
+ {{- toYaml .Values.podSecurityContext | nindent 8 }}
  containers:
  - name: "{{ .Release.Name }}-cleanup"
  image: "{{ include "cleanupImage" . }}"
@@ -99,3 +101,5 @@ spec:
  kubectl -n "$ns" delete rolebinding pod-executor-namespaced --ignore-not-found=true
  kubectl -n "$ns" delete role pod-executor --ignore-not-found=true
  done
+ securityContext:
+ {{- toYaml .Values.securityContext | nindent 12 }}

charts/k8up/templates/grafana-dashboard.yaml

@@ -5,7 +5,7 @@ metadata:
  namespace: {{ default .Release.Namespace .Values.metrics.grafanaDashboard.namespace }}
  labels:
  {{- include "k8up.labels" . | nindent 4 }}
- {{- with .Values.metrics.prometheusRule.additionalLabels }}
+ {{- with .Values.metrics.grafanaDashboard.additionalLabels }}
  {{- toYaml . | nindent 4 }}
  {{- end }}
 data: