feat(chart): Make the securityContext for the StatefulSet configurable #62
Reference in New Issue
Block a user
No description provided.
Delete Branch "ssullivan/helm-actions:configure-pod-securitycontext"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Description of the change
This patch adds the ability to customize the
SecurityContextfor thestatefulsetof the Gitea Actionsact_runner.This allows users to configure pod-level security settings, such as
fsGroupandfsGroupChangePolicy.The patch introduces
statefulset.podSecurityContextas a new configurable parameter.Benefits
This change makes the chart more configurable for different kinds of deployment scenarios.
Possible drawbacks
Applicable issues
Additional information
podSecurityContextfor thestatefulset. It does not modify any other security settings or introduce new features beyond this customization.statefulset.podSecurityContextis an empty object{}, meaning no security context is applied unless the user explicitly defines it.⚠ BREAKING
Checklist
values.yamland added to theREADME.mdusing readme-generator-for-helmtemplatesfolder)Seems simple enough.
Reverted the hash in the unit test
@@ -38,6 +39,7 @@ statefulset:tolerations: []affinity: {}extraVolumes: []podSecurityContext: {}What was the reason for the name podSecurityContext? I would have called this just securityContext, e.g. using a name that kubernetes itself is using.
I am fine merging this either way
I am good with changing this to securityContext. I’ll make that change… puts it more inline with the k8s schema
@ChristopherHX I've updated this to be securityContext
@ssullivan Please apply the latest main branch into this, so we may merge gracefully.
3ae1c21eebto79e8f90dc7Just saw the changes to main. I've rebased this PR
Looks good.
79e8f90dc7to9057b440e59057b440e5to594e7a3e60I've updated this with main again
594e7a3e60to88ff5d7fee