Skip to content

Commit

Permalink
make configurable securityContext at statefulset spec level (helm#102) (
Browse files Browse the repository at this point in the history
helm#21218)

Signed-off-by: devOpsHelm <devops+1@hazelcast.com>
  • Loading branch information
devOpsHelm authored and Ian Levesque committed Jul 13, 2020
1 parent e1031aa commit 4449d9a
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 1 deletion.
2 changes: 1 addition & 1 deletion stable/hazelcast/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v1
name: hazelcast
version: 3.0.4
version: 3.0.5
appVersion: "4.0"
tillerVersion: ">=2.7.2"
kubeVersion: ">=1.9.0-0"
Expand Down
2 changes: 2 additions & 0 deletions stable/hazelcast/templates/mancenter-statefulset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -38,11 +38,13 @@ spec:
hostNetwork: false
hostPID: false
hostIPC: false
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: {{ if eq (int .Values.securityContext.runAsUser) 0 }}false{{ else }}true{{ end }}
runAsUser: {{ .Values.securityContext.runAsUser }}
runAsGroup: {{ .Values.securityContext.runAsGroup }}
fsGroup: {{ .Values.securityContext.fsGroup }}
{{- end }}
{{- if .Values.mancenter.affinity }}
affinity:
{{ toYaml .Values.mancenter.affinity | indent 8 }}
Expand Down
2 changes: 2 additions & 0 deletions stable/hazelcast/templates/statefulset.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,13 @@ spec:
hostNetwork: false
hostPID: false
hostIPC: false
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: {{ if eq (int .Values.securityContext.runAsUser) 0 }}false{{ else }}true{{ end }}
runAsUser: {{ .Values.securityContext.runAsUser }}
runAsGroup: {{ .Values.securityContext.runAsGroup }}
fsGroup: {{ .Values.securityContext.fsGroup }}
{{- end }}
{{- if .Values.affinity }}
affinity:
{{ toYaml .Values.affinity | indent 8 }}
Expand Down

0 comments on commit 4449d9a

Please sign in to comment.