Skip to content

Commit

Permalink
fix(chart): add pod securitycontext besides contsainer ones
Browse files Browse the repository at this point in the history
  • Loading branch information
raffis committed Sep 22, 2023
1 parent 29becc3 commit 955f51a
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 0 deletions.
4 changes: 4 additions & 0 deletions chart/saml-exporter/templates/deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -109,6 +109,10 @@ spec:
volumes:
{{ toYaml .Values.extraVolumes | trim | nindent 6 }}
{{- end }}
{{- with .Values.podSecurityContext }}
securityContext:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- with .Values.affinity }}
affinity:
{{- toYaml . | nindent 8 }}
Expand Down
2 changes: 2 additions & 0 deletions chart/saml-exporter/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,8 @@ securityContext:
capabilities:
drop: ["all"]
readOnlyRootFilesystem: true

podSecurityContext:
runAsGroup: 10000
runAsNonRoot: true
runAsUser: 10000
Expand Down

0 comments on commit 955f51a

Please sign in to comment.