mirror of
https://github.com/bitnami/charts.git
synced 2026-08-09 12:55:41 +08:00
[bitnami/mariadb] Add initContainerSecurityContext parameter for primary initContainer (#34373)
* feat: add initContainerSecurityContext parameter for MariaDB primary Signed-off-by: Yıldız, Yunus <dolphinstar121@gmail.com> * Update CHANGELOG.md Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com> * Update CHANGELOG.md Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com> * Update CHANGELOG.md Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com> --------- Signed-off-by: Yıldız, Yunus <dolphinstar121@gmail.com> Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com> Signed-off-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com> Co-authored-by: Bitnami Bot <bitnami.bot@broadcom.com> Co-authored-by: Carlos Rodríguez Hernández <carlos.rodriguez-hernandez@broadcom.com>
This commit is contained in:
YunusStar
co-authored by
Bitnami Bot
Carlos Rodríguez Hernández
Bitnami Bot
Carlos Rodríguez Hernández
parent
466dbcda6c
commit
c414d93501
@@ -1,8 +1,12 @@
|
||||
# Changelog
|
||||
|
||||
## 23.0.1 (2025-11-17)
|
||||
|
||||
* [bitnami/mariadb] Add initContainerSecurityContext parameter for primary initContainer ([#34373](https://github.com/bitnami/charts/pull/34373))
|
||||
|
||||
## 22.0.0 (2025-08-18)
|
||||
|
||||
* [bitnami/mariadb] :zap: :arrow_up: Update dependency references ([#36108](https://github.com/bitnami/charts/pull/36108))
|
||||
* [bitnami/mariadb] :zap: :arrow_up: Update dependency references (#36108) ([e429923](https://github.com/bitnami/charts/commit/e429923d43fd6ee5171c5554ef072d1dddc4810c)), closes [#36108](https://github.com/bitnami/charts/issues/36108)
|
||||
|
||||
## <small>21.0.8 (2025-08-14)</small>
|
||||
|
||||
|
||||
@@ -36,4 +36,4 @@ maintainers:
|
||||
name: mariadb
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/mariadb
|
||||
version: 23.0.0
|
||||
version: 23.0.1
|
||||
|
||||
@@ -382,7 +382,7 @@ As an alternative, this chart supports using an initContainer to change the owne
|
||||
### MariaDB Primary parameters
|
||||
|
||||
| Name | Description | Value |
|
||||
| ----------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- |
|
||||
| --------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------- |
|
||||
| `primary.name` | Name of the primary database (eg primary, master, leader, ...) | `primary` |
|
||||
| `primary.command` | Override default container command on MariaDB Primary container(s) (useful when using custom images) | `[]` |
|
||||
| `primary.args` | Override default container args on MariaDB Primary container(s) (useful when using custom images) | `[]` |
|
||||
@@ -425,6 +425,16 @@ As an alternative, this chart supports using an initContainer to change the owne
|
||||
| `primary.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
| `primary.containerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
|
||||
| `primary.containerSecurityContext.seccompProfile.type` | Set container's Security Context seccomp profile | `RuntimeDefault` |
|
||||
| `primary.initContainerSecurityContext.enabled` | MariaDB primary init container securityContext | `true` |
|
||||
| `primary.initContainerSecurityContext.seLinuxOptions` | Set SELinux options in init container | `{}` |
|
||||
| `primary.initContainerSecurityContext.runAsUser` | User ID for the MariaDB primary init container | `1001` |
|
||||
| `primary.initContainerSecurityContext.runAsGroup` | Group ID for the MariaDB primary init container | `1001` |
|
||||
| `primary.initContainerSecurityContext.runAsNonRoot` | Set primary init container's Security Context runAsNonRoot | `true` |
|
||||
| `primary.initContainerSecurityContext.privileged` | Set primary init container's Security Context privileged | `false` |
|
||||
| `primary.initContainerSecurityContext.allowPrivilegeEscalation` | Set primary init container's Security Context allowPrivilegeEscalation | `false` |
|
||||
| `primary.initContainerSecurityContext.readOnlyRootFilesystem` | Set init container's Security Context readOnlyRootFilesystem | `true` |
|
||||
| `primary.initContainerSecurityContext.capabilities.drop` | List of capabilities to be dropped | `["ALL"]` |
|
||||
| `primary.initContainerSecurityContext.seccompProfile.type` | Set init container's Security Context seccomp profile | `RuntimeDefault` |
|
||||
| `primary.resourcesPreset` | Set container resources according to one common preset (allowed values: none, nano, micro, small, medium, large, xlarge, 2xlarge). This is ignored if primary.resources is set (primary.resources is recommended for production). | `small` |
|
||||
| `primary.resources` | Set container requests and limits for different resources like CPU or memory (essential for production workloads) | `{}` |
|
||||
| `primary.startupProbe.enabled` | Enable startupProbe | `false` |
|
||||
|
||||
@@ -91,8 +91,8 @@ spec:
|
||||
- name: preserve-logs-symlinks
|
||||
image: {{ include "mariadb.image" . }}
|
||||
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
|
||||
{{- if .Values.primary.containerSecurityContext.enabled }}
|
||||
securityContext: {{- include "common.compatibility.renderSecurityContext" (dict "secContext" .Values.primary.containerSecurityContext "context" $) | nindent 12 }}
|
||||
{{- if .Values.primary.initContainerSecurityContext.enabled }}
|
||||
securityContext: {{- include "common.compatibility.renderSecurityContext" (dict "secContext" .Values.primary.initContainerSecurityContext "context" $) | nindent 12 }}
|
||||
{{- end }}
|
||||
{{- if .Values.primary.resources }}
|
||||
resources: {{ toYaml .Values.primary.resources | nindent 12 }}
|
||||
|
||||
@@ -483,6 +483,32 @@ primary:
|
||||
drop: ["ALL"]
|
||||
seccompProfile:
|
||||
type: "RuntimeDefault"
|
||||
## MariaDB primary init container security context
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
|
||||
## @param primary.initContainerSecurityContext.enabled MariaDB primary init container securityContext
|
||||
## @param primary.initContainerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in init container
|
||||
## @param primary.initContainerSecurityContext.runAsUser User ID for the MariaDB primary init container
|
||||
## @param primary.initContainerSecurityContext.runAsGroup Group ID for the MariaDB primary init container
|
||||
## @param primary.initContainerSecurityContext.runAsNonRoot Set primary init container's Security Context runAsNonRoot
|
||||
## @param primary.initContainerSecurityContext.privileged Set primary init container's Security Context privileged
|
||||
## @param primary.initContainerSecurityContext.allowPrivilegeEscalation Set primary init container's Security Context allowPrivilegeEscalation
|
||||
## @param primary.initContainerSecurityContext.readOnlyRootFilesystem Set init container's Security Context readOnlyRootFilesystem
|
||||
## @param primary.initContainerSecurityContext.capabilities.drop List of capabilities to be dropped
|
||||
## @param primary.initContainerSecurityContext.seccompProfile.type Set init container's Security Context seccomp profile
|
||||
##
|
||||
initContainerSecurityContext:
|
||||
enabled: true
|
||||
seLinuxOptions: {}
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
capabilities:
|
||||
drop: ["ALL"]
|
||||
seccompProfile:
|
||||
type: "RuntimeDefault"
|
||||
## MariaDB primary container's resource requests and limits
|
||||
## ref: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
|
||||
## We usually recommend not to specify default resources and to leave this as a conscious
|
||||
|
||||
Reference in New Issue
Block a user