home/charts
2
0
Fork 0
mirror of https://github.com/wahyd4/charts.git synced 2026-08-21 11:06:10 +10:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/nginx] containerSecurityContext for containers (#8221)

Browse Source 
* Update deployment.yaml

Add containerSecurityContext for init containers git-clone-repository and git-repo-syncer

* Update README.md

* Update values.yaml

* Update Chart.yaml
This commit is contained in:
Adrian43211234
2021-11-24 09:55:21 +01:00
committed by GitHub
parent d97905a8c4
commit e8697b5c1f
4 changed files with 14 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/nginx/Chart.yaml
+1 -1
View File
@@ -25,4 +25,4 @@ name: nginx
sources:
- https://github.com/bitnami/bitnami-docker-nginx
- http://www.nginx.org
version: 9.5.13
version: 9.5.14
bitnami/nginx/README.md
+3 -3
View File
@@ -105,9 +105,9 @@ The command removes all the Kubernetes components associated with the chart and
| `podSecurityContext.enabled` | Enabled NGINX pods' Security Context | `false` |
| `podSecurityContext.fsGroup` | Set NGINX pod's Security Context fsGroup | `1001` |
| `podSecurityContext.sysctls` | sysctl settings of the NGINX pods | `[]` |
| `containerSecurityContext.enabled` | Enabled NGINX Core containers' Security Context | `false` |
| `containerSecurityContext.runAsUser` | Set NGINX Core container's Security Context runAsUser | `1001` |
| `containerSecurityContext.runAsNonRoot` | Set NGINX Core container's Security Context runAsNonRoot | `true` |
| `containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `false` |
| `containerSecurityContext.runAsUser` | Set NGINX container's Security Context runAsUser | `1001` |
| `containerSecurityContext.runAsNonRoot` | Set NGINX container's Security Context runAsNonRoot | `true` |
| `containerPorts.http` | Sets http port inside NGINX container | `8080` |
| `containerPorts.https` | Sets https port inside NGINX container | `""` |
| `resources.limits` | The resources limits for the NGINX container | `{}` |
bitnami/nginx/templates/deployment.yaml
+6
View File
@@ -64,6 +64,9 @@ spec:
- name: git-clone-repository
image: {{ include "nginx.cloneStaticSiteFromGit.image" . }}
imagePullPolicy: {{ .Values.cloneStaticSiteFromGit.image.pullPolicy | quote }}
{{- if .Values.containerSecurityContext.enabled }}
securityContext: {{- omit .Values.containerSecurityContext "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- if .Values.cloneStaticSiteFromGit.gitClone.command }}
command: {{- include "common.tplvalues.render" (dict "value" .Values.cloneStaticSiteFromGit.gitClone.command "context" $) | nindent 12 }}
{{- else}}
@@ -91,6 +94,9 @@ spec:
- name: git-repo-syncer
image: {{ include "nginx.cloneStaticSiteFromGit.image" . }}
imagePullPolicy: {{ .Values.cloneStaticSiteFromGit.image.pullPolicy | quote }}
{{- if .Values.containerSecurityContext.enabled }}
securityContext: {{- omit .Values.containerSecurityContext "enabled" | toYaml | nindent 12 }}
{{- end }}
{{- if .Values.cloneStaticSiteFromGit.gitSync.command }}
command: {{- include "common.tplvalues.render" (dict "value" .Values.cloneStaticSiteFromGit.gitSync.command "context" $) | nindent 12 }}
{{- else}}
bitnami/nginx/values.yaml
+4 -4
View File
@@ -166,11 +166,11 @@ podSecurityContext:
## value: "10000"
##
sysctls: []
## NGINX Core containers' Security Context (only main container).
## NGINX containers' Security Context.
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param containerSecurityContext.enabled Enabled NGINX Core containers' Security Context
## @param containerSecurityContext.runAsUser Set NGINX Core container's Security Context runAsUser
## @param containerSecurityContext.runAsNonRoot Set NGINX Core container's Security Context runAsNonRoot
## @param containerSecurityContext.enabled Enabled NGINX containers' Security Context
## @param containerSecurityContext.runAsUser Set NGINX container's Security Context runAsUser
## @param containerSecurityContext.runAsNonRoot Set NGINX container's Security Context runAsNonRoot
##
containerSecurityContext:
enabled: false