airship/porthole
Code Issues Proposed changes

Mysqlclient-utility: Add pod/container security context

Browse Source 
This updates the Mysqlclient-utility chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to false

Change-Id: I9c434f83cd9f03013f6ab9e3279da35a6d9d3893
This commit is contained in:
Rahul Khiyani
2019-11-25 10:38:55 -06:00
parent 19e2fa9721
commit 59069fdb69
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
charts/mysqlclient-utility/templates/deployment-utility.yaml
View File

@@ -68,8 +68,7 @@ spec:
labels:
{{ tuple $envAll "mysqlclient" "utility" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
spec:
securityContext:
runAsUser: 65534
{{ dict "envAll" $envAll "application" "mysqlclient" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}
affinity:
{{ tuple $envAll "mysqlclient" "utility" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}
@@ -79,6 +78,7 @@ spec:
- name: {{ printf "%s" $envAll.Release.Name }}
{{ tuple $envAll "mysqlclient_utility" | include "helm-toolkit.snippets.image" | indent 10 }}
{{ tuple $envAll $envAll.Values.pod.resources.mysql_utility | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
{{ dict "envAll" $envAll "application" "mysqlclient" "container" "mysqlclient_utility" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
command:
- /tmp/bootstrap.sh
readinessProbe: