Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-02-26 07:37:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/fluentd] feat: ✨ Add seccompProfile to containerSecurityContext (#21910)

Browse Source 
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
Signed-off-by: Javier J. Salmerón-García <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
2024-01-10 15:15:52 +01:00
committed by GitHub
parent 3457296e09
commit 4b5e241981
3 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bitnami/fluentd/Chart.yaml
View File

@@ -30,4 +30,4 @@ maintainers:
name: fluentd
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/fluentd
version: 5.11.1
version: 5.12.0

2
bitnami/fluentd/README.md
View File

@@ -103,6 +103,7 @@ The command removes all the Kubernetes components associated with the chart and
| `forwarder.containerSecurityContext.allowPrivilegeEscalation` | Allow Privilege Escalation | `false` |
| `forwarder.containerSecurityContext.readOnlyRootFilesystem` | Require the use of a read only root file system | `false` |
| `forwarder.containerSecurityContext.capabilities.drop` | Drop capabilities for the securityContext | `[]` |
| `forwarder.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `forwarder.hostNetwork` | Enable use of host network | `false` |
| `forwarder.dnsPolicy` | Pod-specific DNS policy | `""` |
| `forwarder.terminationGracePeriodSeconds` | Duration in seconds the pod needs to terminate gracefully | `30` |
@@ -199,6 +200,7 @@ The command removes all the Kubernetes components associated with the chart and
| `aggregator.containerSecurityContext.allowPrivilegeEscalation` | Allow Privilege Escalation | `false` |
| `aggregator.containerSecurityContext.readOnlyRootFilesystem` | Require the use of a read only root file system | `false` |
| `aggregator.containerSecurityContext.capabilities.drop` | Drop capabilities for the securityContext | `[]` |
| `aggregator.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
| `aggregator.terminationGracePeriodSeconds` | Duration in seconds the pod needs to terminate gracefully | `30` |
| `aggregator.extraGems` | List of extra gems to be installed. Can be used to install additional fluentd plugins. | `[]` |
| `aggregator.configFile` | Name of the config file that will be used by Fluentd at launch under the `/opt/bitnami/fluentd/conf` directory | `fluentd.conf` |

6
bitnami/fluentd/values.yaml
View File

@@ -130,6 +130,7 @@ forwarder:
## @param forwarder.containerSecurityContext.allowPrivilegeEscalation Allow Privilege Escalation
## @param forwarder.containerSecurityContext.readOnlyRootFilesystem Require the use of a read only root file system
## @param forwarder.containerSecurityContext.capabilities.drop [array] Drop capabilities for the securityContext
## @param forwarder.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
##
containerSecurityContext:
enabled: true
@@ -141,6 +142,8 @@ forwarder:
capabilities:
drop:
- ALL
seccompProfile:
type: "RuntimeDefault"
## @param forwarder.hostNetwork Enable use of host network
##
hostNetwork: false
@@ -677,6 +680,7 @@ aggregator:
## @param aggregator.containerSecurityContext.allowPrivilegeEscalation Allow Privilege Escalation
## @param aggregator.containerSecurityContext.readOnlyRootFilesystem Require the use of a read only root file system
## @param aggregator.containerSecurityContext.capabilities.drop [array] Drop capabilities for the securityContext
## @param aggregator.containerSecurityContext.seccompProfile.type Set container's Security Context seccomp profile
##
containerSecurityContext:
enabled: true
@@ -688,6 +692,8 @@ aggregator:
capabilities:
drop:
- ALL
seccompProfile:
type: "RuntimeDefault"
## @param aggregator.terminationGracePeriodSeconds Duration in seconds the pod needs to terminate gracefully
## https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/
##