Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-08-10 14:15:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/metallb] feat: ✨ 🔒 Add runAsGroup (#23969)

Browse Source 
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
2024-02-29 11:58:07 +01:00
committed by GitHub
parent 25ad544c8a
commit 0fd8baa6d7
3 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/metallb/Chart.yaml
+1 -1
View File
@@ -35,4 +35,4 @@ maintainers:
name: metallb
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/metallb
version: 4.14.2
version: 4.15.0
bitnami/metallb/README.md
+4 -2
View File
@@ -132,7 +132,8 @@ The command removes all the Kubernetes components associated with the chart and
| `controller.podSecurityContext.fsGroup` | Set MetalLB Controller pod's Security Context fsGroup | `1001` |
| `controller.containerSecurityContext.enabled` | Enabled MetalLB Controller containers' Security Context | `true` |
| `controller.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `controller.containerSecurityContext.runAsUser` | Set MetalLB Controller containers' Security Context runAsUser | `1001` |
| `controller.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
| `controller.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
| `controller.containerSecurityContext.runAsNonRoot` | Set MetalLB Controller container's Security Context runAsNonRoot | `true` |
| `controller.containerSecurityContext.allowPrivilegeEscalation` | Enables privilege Escalation context for the pod. | `false` |
| `controller.containerSecurityContext.readOnlyRootFilesystem` | Allows the pod to mount the RootFS as ReadOnly | `true` |
@@ -244,7 +245,8 @@ The command removes all the Kubernetes components associated with the chart and
| `speaker.podSecurityContext.fsGroup` | Set Speaker pod's Security Context fsGroup | `0` |
| `speaker.containerSecurityContext.enabled` | Enabled Speaker containers' Security Context | `true` |
| `speaker.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
| `speaker.containerSecurityContext.runAsUser` | Set Speaker containers' Security Context runAsUser | `0` |
| `speaker.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `0` |
| `speaker.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `0` |
| `speaker.containerSecurityContext.allowPrivilegeEscalation` | Enables privilege Escalation context for the pod. | `false` |
| `speaker.containerSecurityContext.readOnlyRootFilesystem` | Allows the pod to mount the RootFS as ReadOnly | `true` |
| `speaker.containerSecurityContext.capabilities.drop` | Drop capabilities for the securityContext | `[]` |
bitnami/metallb/values.yaml
+6 -2
View File
@@ -302,7 +302,8 @@ controller:
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param controller.containerSecurityContext.enabled Enabled MetalLB Controller containers' Security Context
## @param controller.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
## @param controller.containerSecurityContext.runAsUser Set MetalLB Controller containers' Security Context runAsUser
## @param controller.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
## @param controller.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
## @param controller.containerSecurityContext.runAsNonRoot Set MetalLB Controller container's Security Context runAsNonRoot
## @param controller.containerSecurityContext.allowPrivilegeEscalation Enables privilege Escalation context for the pod.
## @param controller.containerSecurityContext.readOnlyRootFilesystem Allows the pod to mount the RootFS as ReadOnly
@@ -313,6 +314,7 @@ controller:
enabled: true
seLinuxOptions: null
runAsUser: 1001
runAsGroup: 1001
runAsNonRoot: true
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
@@ -741,7 +743,8 @@ speaker:
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param speaker.containerSecurityContext.enabled Enabled Speaker containers' Security Context
## @param speaker.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
## @param speaker.containerSecurityContext.runAsUser Set Speaker containers' Security Context runAsUser
## @param speaker.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
## @param speaker.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
## @param speaker.containerSecurityContext.allowPrivilegeEscalation Enables privilege Escalation context for the pod.
## @param speaker.containerSecurityContext.readOnlyRootFilesystem Allows the pod to mount the RootFS as ReadOnly
## @param speaker.containerSecurityContext.capabilities.drop [array] Drop capabilities for the securityContext
@@ -752,6 +755,7 @@ speaker:
enabled: true
seLinuxOptions: null
runAsUser: 0
runAsGroup: 0
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities: