feat: securityContext more flexible set, fix higress-group#289

OnlyPiglet · Feb 25, 2024 · 539ed9f · 539ed9f
1 parent e5aad32
commit 539ed9f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 9 deletions.
diff --git a/helm/templates/prometheus.yaml b/helm/templates/prometheus.yaml
@@ -134,11 +134,8 @@ spec:
             memory: {{ $config.resources.limits.memory }}
       restartPolicy: Always
       serviceAccountName: {{ $appName }}
-      {{- if .Values.o11y.prometheus.securityContext.enabled }}
       securityContext:
-        fsGroup: {{ .Values.o11y.prometheus.securityContext.fsGroup }}
-        runAsUser: {{ .Values.o11y.prometheus.securityContext.runAsUser }}
-      {{- end }}
+        {{- toYaml .Values.o11y.prometheus.securityContext | nindent 8 }}
       volumes:
       - name: data
         persistentVolumeClaim:

diff --git a/helm/values.yaml b/helm/values.yaml
@@ -80,9 +80,6 @@ o11y:
       limits:
         cpu: 500m
         memory: 2Gi
-    securityContext:
-      enabled: true
-      runAsUser: 0
-      fsGroup: 0
+    securityContext: {}
 pvc:
-  rwxSupported: true
+  rwxSupported: true