Skip to content

Commit 6e0d370

Browse files
Add container security context. Fix typo.
1 parent 43c7769 commit 6e0d370

File tree

2 files changed

+9
-2
lines changed

2 files changed

+9
-2
lines changed

chart/redis-cluster-operator/templates/operator.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,13 @@ spec:
1414
spec:
1515
serviceAccountName: {{ .Values.operator.service_account_name }}
1616
securityContext:
17-
{{- .Values.operator.securityContext | toYaml | nindent }}
17+
{{- .Values.operator.podsecurityContext | toYaml | nindent 8 }}
1818
containers:
1919
- name: {{ .Values.operator.name }}
2020
# Replace this with the built image name
2121
image: {{ .Values.operator.image_source }}:{{ .Values.operator.image_tag }}
22+
securityContext:
23+
{{- .Values.operator.containersecurityContext | toYaml | nindent 14 }}
2224
command:
2325
- redis-cluster-operator
2426
args:

chart/redis-cluster-operator/values.yaml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,16 @@ operator:
1414
requests:
1515
cpu: 100m
1616
memory: 100Mi
17-
securityContext:
17+
podsecurityContext:
1818
runAsUser: 1100
1919
runAsGroup: 1100
2020
fsGroup: 1100
2121
supplementalGroups: [1100]
22+
containersecurityContext:
23+
allowPrivilegeEscalation: false
24+
capabilities:
25+
drop:
26+
- ALL
2227

2328
data:
2429
redis_conf: |-

0 commit comments

Comments
 (0)