From ce2849ccd7077ef2506c271abe36a4b8e836ec7d Mon Sep 17 00:00:00 2001 From: Richard Kugler <36081947+BYondRAK@users.noreply.github.com> Date: Wed, 26 May 2021 14:07:47 -0400 Subject: [PATCH 1/4] Allow use of securityContext Update Deployment with securityContext for pod and Container --- .../nfs-subdir-external-provisioner/templates/deployment.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/charts/nfs-subdir-external-provisioner/templates/deployment.yaml b/charts/nfs-subdir-external-provisioner/templates/deployment.yaml index a8b47fc0..b21efdc2 100644 --- a/charts/nfs-subdir-external-provisioner/templates/deployment.yaml +++ b/charts/nfs-subdir-external-provisioner/templates/deployment.yaml @@ -24,6 +24,8 @@ spec: {{- include "nfs-subdir-external-provisioner.podLabels" . | nindent 8 }} spec: serviceAccountName: {{ template "nfs-subdir-external-provisioner.serviceAccountName" . }} + securityContext: + {{- toYaml .Values.podSecurityContext | nindent 8 }} {{- if .Values.nodeSelector }} nodeSelector: {{ toYaml .Values.nodeSelector | indent 8 }} @@ -43,6 +45,8 @@ spec: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} volumeMounts: - name: {{ .Values.nfs.volumeName }} mountPath: /persistentvolumes From 8b7f3ae920797f4d8bcceb7c5de79a55b6ded3f9 Mon Sep 17 00:00:00 2001 From: Richard Kugler <36081947+BYondRAK@users.noreply.github.com> Date: Wed, 26 May 2021 14:14:52 -0400 Subject: [PATCH 2/4] Update Values to support securityContext Adding securityContext variables to the values file. --- charts/nfs-subdir-external-provisioner/values.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/charts/nfs-subdir-external-provisioner/values.yaml b/charts/nfs-subdir-external-provisioner/values.yaml index 20720b19..e7d4a78d 100644 --- a/charts/nfs-subdir-external-provisioner/values.yaml +++ b/charts/nfs-subdir-external-provisioner/values.yaml @@ -74,6 +74,10 @@ podAnnotations: {} ## Set pod priorityClassName # priorityClassName: "" +podSecurityContext: {} + +securityContext: {} + serviceAccount: # Specifies whether a ServiceAccount should be created create: true From 9c867b50b82c33b7e155995234682f60162e4341 Mon Sep 17 00:00:00 2001 From: Daniel Kemp Date: Thu, 20 Jan 2022 16:19:40 -0500 Subject: [PATCH 3/4] fix indentation --- .../nfs-subdir-external-provisioner/templates/deployment.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/nfs-subdir-external-provisioner/templates/deployment.yaml b/charts/nfs-subdir-external-provisioner/templates/deployment.yaml index b21efdc2..15a574b2 100644 --- a/charts/nfs-subdir-external-provisioner/templates/deployment.yaml +++ b/charts/nfs-subdir-external-provisioner/templates/deployment.yaml @@ -25,7 +25,7 @@ spec: spec: serviceAccountName: {{ template "nfs-subdir-external-provisioner.serviceAccountName" . }} securityContext: - {{- toYaml .Values.podSecurityContext | nindent 8 }} + {{- toYaml .Values.podSecurityContext | nindent 8 }} {{- if .Values.nodeSelector }} nodeSelector: {{ toYaml .Values.nodeSelector | indent 8 }} From 5c92c0ae51b944c515c39a7e3696f58222d91c06 Mon Sep 17 00:00:00 2001 From: Daniel Kemp Date: Thu, 20 Jan 2022 16:19:56 -0500 Subject: [PATCH 4/4] Update chart version --- charts/nfs-subdir-external-provisioner/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/nfs-subdir-external-provisioner/Chart.yaml b/charts/nfs-subdir-external-provisioner/Chart.yaml index 58d3174a..9783d088 100644 --- a/charts/nfs-subdir-external-provisioner/Chart.yaml +++ b/charts/nfs-subdir-external-provisioner/Chart.yaml @@ -3,7 +3,7 @@ appVersion: 4.0.2 description: nfs-subdir-external-provisioner is an automatic provisioner that used your *already configured* NFS server, automatically creating Persistent Volumes. name: nfs-subdir-external-provisioner home: https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner -version: 4.0.14 +version: 4.0.15 kubeVersion: ">=1.9.0-0" sources: - https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner