Add podSecurityContext

kubernetes · Jan 15, 2025 · 4bc2ddd · 4bc2ddd
1 parent bbb82f4
commit 4bc2ddd
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/charts/manila-csi-plugin/templates/controllerplugin-statefulset.yaml b/charts/manila-csi-plugin/templates/controllerplugin-statefulset.yaml
@@ -15,6 +15,7 @@ spec:
       labels:
         {{- include "openstack-manila-csi.controllerplugin.labels" .  | nindent 8 }}
     spec:
+      securityContext: {{ toYaml .Values.controllerplugin.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ include "openstack-manila-csi.serviceAccountName.controllerplugin" . }}
       containers:
         {{- range .Values.shareProtocols }}

diff --git a/charts/manila-csi-plugin/templates/nodeplugin-daemonset.yaml b/charts/manila-csi-plugin/templates/nodeplugin-daemonset.yaml
@@ -13,6 +13,7 @@ spec:
       labels:
         {{- include "openstack-manila-csi.nodeplugin.labels" .  | nindent 8 }}
     spec:
+      securityContext: {{ toYaml .Values.nodeplugin.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ include "openstack-manila-csi.serviceAccountName.nodeplugin" . }}
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet

diff --git a/charts/manila-csi-plugin/values.yaml b/charts/manila-csi-plugin/values.yaml
@@ -75,6 +75,7 @@ nodeplugin:
   priorityClassName: ""
   # Use fullnameOverride to fully override the name of this component
   # fullnameOverride: some-other-name
+  podSecurityContext: {}
 
 # StatefulSet deployment
 controllerplugin:
@@ -119,6 +120,7 @@ controllerplugin:
   #     - "keystone.hostname.com"
   # Use fullnameOverride to fully override the name of this component
   # fullnameOverride: some-other-name
+  podSecurityContext: {}
 
 # Log verbosity level.
 # See https://github.com/kubernetes/community/blob/master/contributors/devel/sig-instrumentation/logging.md