mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/jenkins] fix: 🐛 Set seLinuxOptions to null for Openshift compatibility (#22602)
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
@@ -35,4 +35,4 @@ maintainers:
|
||||
name: jenkins
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/jenkins
|
||||
version: 12.6.0
|
||||
version: 12.6.1
|
||||
|
||||
@@ -155,7 +155,7 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `configAsCode.autoReload.extraEnvVarsCM` | | `""` |
|
||||
| `configAsCode.autoReload.extraVolumeMounts` | | `[]` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `configAsCode.autoReload.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -183,7 +183,7 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `agent.resources.limits` | The resources limits for the Jenkins container | `{}` |
|
||||
| `agent.resources.requests` | The requested resources for the Jenkins container | `{}` |
|
||||
| `agent.containerSecurityContext.enabled` | Enable container security context | `false` |
|
||||
| `agent.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `agent.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `agent.containerSecurityContext.runAsUser` | User ID for the agent container | `""` |
|
||||
| `agent.containerSecurityContext.runAsGroup` | User ID for the agent container | `""` |
|
||||
| `agent.containerSecurityContext.privileged` | Decide if the container runs privileged. | `false` |
|
||||
@@ -224,7 +224,7 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||
| `podSecurityContext.fsGroup` | Set Jenkins pod's Security Context fsGroup | `1001` |
|
||||
| `containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -317,7 +317,7 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `volumePermissions.image.pullSecrets` | OS Shell + Utility image pull secrets | `[]` |
|
||||
| `volumePermissions.resources.limits` | The resources limits for the init container | `{}` |
|
||||
| `volumePermissions.resources.requests` | The requested resources for the init container | `{}` |
|
||||
| `volumePermissions.securityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `volumePermissions.securityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `volumePermissions.securityContext.runAsUser` | Set init container's Security Context runAsUser | `0` |
|
||||
|
||||
### Other Parameters
|
||||
|
||||
@@ -313,7 +313,7 @@ configAsCode:
|
||||
## Configure Container Security Context
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param configAsCode.autoReload.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param configAsCode.autoReload.containerSecurityContext.seLinuxOptions Set SELinux options in container
|
||||
## @param configAsCode.autoReload.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param configAsCode.autoReload.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param configAsCode.autoReload.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param configAsCode.autoReload.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
@@ -324,7 +324,7 @@ configAsCode:
|
||||
##
|
||||
containerSecurityContext:
|
||||
enabled: true
|
||||
seLinuxOptions: {}
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
@@ -418,14 +418,14 @@ agent:
|
||||
## Container securityContext
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param agent.containerSecurityContext.enabled Enable container security context
|
||||
## @param agent.containerSecurityContext.seLinuxOptions Set SELinux options in container
|
||||
## @param agent.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param agent.containerSecurityContext.runAsUser User ID for the agent container
|
||||
## @param agent.containerSecurityContext.runAsGroup User ID for the agent container
|
||||
## @param agent.containerSecurityContext.privileged Decide if the container runs privileged.
|
||||
##
|
||||
containerSecurityContext:
|
||||
enabled: false
|
||||
seLinuxOptions: {}
|
||||
seLinuxOptions: null
|
||||
runAsUser: ""
|
||||
runAsGroup: ""
|
||||
privileged: false
|
||||
@@ -578,7 +578,7 @@ podSecurityContext:
|
||||
## Configure Container Security Context (only main container)
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param containerSecurityContext.seLinuxOptions Set SELinux options in container
|
||||
## @param containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param containerSecurityContext.privileged Set container's Security Context privileged
|
||||
@@ -589,7 +589,7 @@ podSecurityContext:
|
||||
##
|
||||
containerSecurityContext:
|
||||
enabled: true
|
||||
seLinuxOptions: {}
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
@@ -956,14 +956,14 @@ volumePermissions:
|
||||
requests: {}
|
||||
## Init container Container Security Context
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param volumePermissions.securityContext.seLinuxOptions Set SELinux options in container
|
||||
## @param volumePermissions.securityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param volumePermissions.securityContext.runAsUser Set init container's Security Context runAsUser
|
||||
## NOTE: when runAsUser is set to special value "auto", init container will try to chown the
|
||||
## data folder to auto-determined user&group, using commands: `id -u`:`id -G | cut -d" " -f2`
|
||||
## "auto" is especially useful for OpenShift which has scc with dynamic user ids (and 0 is not allowed)
|
||||
##
|
||||
securityContext:
|
||||
seLinuxOptions: {}
|
||||
seLinuxOptions: null
|
||||
runAsUser: 0
|
||||
|
||||
## @section Other Parameters
|
||||
|
||||
Reference in New Issue
Block a user