Add resources to copy-container

Author: rjeberhard

kubernetes/charts/weblogic-operator/templates/_operator-dep.tpl

@@ -63,6 +63,23 @@ spec:
         image: {{ .image | quote }}
         imagePullPolicy: "IfNotPresent"
         command: ["/bin/sh", "-c", "cp /deployment/* /deployment_copy && cp /probes/* /probes_copy"]
+        resources:
+          requests:
+            cpu: {{ .cpuRequests | default "100m" }}
+            memory: {{ .memoryRequests | default "10Mi" }}
+          limits:
+            cpu: {{ .cpuLimits | default "100m" }}
+            memory: {{ .memoryLimits | default "10Mi" }}
+        securityContext:
+          {{- if or (hasKey . "runAsUser") (ne ( .kubernetesPlatform | default "Generic" ) "OpenShift") }}
+          runAsUser: {{ .runAsUser | default 1000 }}
+          {{- end }}
+          runAsNonRoot: true
+          privileged: false
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop: ["ALL"]
         volumeMounts:
         - name: "deployment-volume"
           mountPath: "/deployment_copy"

kubernetes/src/test/java/oracle/kubernetes/operator/create/CreateOperatorGeneratedFilesTestBase.java

@@ -238,6 +238,20 @@ protected V1Deployment getExpectedWeblogicOperatorDeployment() {
                                             newVolumeMount().name("deployment-volume").mountPath("/deployment_copy"))
                                         .addVolumeMountsItem(
                                             newVolumeMount().name("probes-volume").mountPath("/probes_copy"))
+                                        .resources(
+                                            new V1ResourceRequirements()
+                                                .putRequestsItem("cpu", Quantity.fromString("100m"))
+                                                .putRequestsItem(
+                                                    "memory", Quantity.fromString("10Mi"))
+                                                .putLimitsItem("cpu", Quantity.fromString("100m"))
+                                                .putLimitsItem(
+                                                    "memory", Quantity.fromString("10Mi")))
+                                        .securityContext(
+                                            new V1SecurityContext().runAsUser(1000L)
+                                                .runAsNonRoot(true)
+                                                .readOnlyRootFilesystem(true)
+                                                .privileged(false).allowPrivilegeEscalation(false)
+                                                .capabilities(new V1Capabilities().addDropItem("ALL")))
                                 )
                                 .addContainersItem(
                                     newContainer()