fix(helm): allow installation of post-install and post-upgrade jobs

Was missing from 52db6a7 Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
open-policy-agent · Oct 21, 2022 · eb9a40d · eb9a40d
1 parent 91d29f6
commit eb9a40d
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/cmd/build/helmify/static/templates/_helpers.tpl b/cmd/build/helmify/static/templates/_helpers.tpl
@@ -68,6 +68,10 @@ Output post install webhook probe container entry
   resources:
   {{- toYaml .Values.postInstall.resources | nindent 4 }}
   securityContext:
+    {{- if .Values.enableRuntimeDefaultSeccompProfile }}
+    seccompProfile:
+      type: RuntimeDefault
+    {{- end }}
   {{- toYaml .Values.postInstall.securityContext | nindent 4 }}
   volumeMounts:
   - mountPath: /certs

diff --git a/cmd/build/helmify/static/templates/namespace-post-upgrade.yaml b/cmd/build/helmify/static/templates/namespace-post-upgrade.yaml
@@ -49,6 +49,10 @@ spec:
           resources:
             {{- toYaml .Values.postUpgrade.resources | nindent 12 }}
           securityContext:
+            {{- if .Values.enableRuntimeDefaultSeccompProfile }}
+            seccompProfile:
+              type: RuntimeDefault
+            {{- end }}
             {{- toYaml .Values.postUpgrade.securityContext | nindent 12 }}
       {{- with .Values.postUpgrade }}
       affinity:

diff --git a/manifest_staging/charts/gatekeeper/templates/_helpers.tpl b/manifest_staging/charts/gatekeeper/templates/_helpers.tpl
@@ -68,6 +68,10 @@ Output post install webhook probe container entry
   resources:
   {{- toYaml .Values.postInstall.resources | nindent 4 }}
   securityContext:
+    {{- if .Values.enableRuntimeDefaultSeccompProfile }}
+    seccompProfile:
+      type: RuntimeDefault
+    {{- end }}
   {{- toYaml .Values.postInstall.securityContext | nindent 4 }}
   volumeMounts:
   - mountPath: /certs

diff --git a/manifest_staging/charts/gatekeeper/templates/namespace-post-upgrade.yaml b/manifest_staging/charts/gatekeeper/templates/namespace-post-upgrade.yaml
@@ -49,6 +49,10 @@ spec:
           resources:
             {{- toYaml .Values.postUpgrade.resources | nindent 12 }}
           securityContext:
+            {{- if .Values.enableRuntimeDefaultSeccompProfile }}
+            seccompProfile:
+              type: RuntimeDefault
+            {{- end }}
             {{- toYaml .Values.postUpgrade.securityContext | nindent 12 }}
       {{- with .Values.postUpgrade }}
       affinity: