Support containerSecurityContext

influxdata · Sep 4, 2023 · f078717 · f078717
1 parent 65564b1
commit f078717
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 1 deletion.
diff --git a/charts/influxdb/Chart.yaml b/charts/influxdb/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: influxdb
-version: 4.12.5
+version: 4.13.0
 appVersion: 1.8.10
 description: Scalable datastore for metrics, events, and real-time analytics.
 keywords:

diff --git a/charts/influxdb/README.md b/charts/influxdb/README.md
@@ -81,6 +81,7 @@ The following table lists configurable parameters, their descriptions, and their
 | affinity | [Affinity](https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity) for pod assignment | {                                                                    |
 | tolerations | [Tolerations](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/) for pod assignment | []                                                                   |
 | securityContext | [securityContext](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) for pod | {}                                                                   |
+| containerSecurityContext | [containerSecurityContext](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) for container | {}                                                                   |
 | env | environment variables for influxdb container | {}                                                                   |
 | volumes | `volumes` stanza(s) to be used in the main container | nil                                                                  |
 | mountPoints | `volumeMount` stanza(s) to be used in the main container | nil                                                                  |

diff --git a/charts/influxdb/templates/statefulset.yaml b/charts/influxdb/templates/statefulset.yaml
@@ -145,6 +145,9 @@ spec:
           failureThreshold: {{ .Values.startupProbe.failureThreshold | default 6 }}
           periodSeconds: {{ .Values.startupProbe.periodSeconds | default 5 }}
         {{- end }}
+        {{- with .Values.containerSecurityContext }}
+        securityContext: {{ toYaml . | nindent 10 }}
+        {{- end }}
         volumeMounts:
         - name: {{ include "influxdb.fullname" . }}-data
           mountPath: /var/lib/influxdb

diff --git a/charts/influxdb/values.yaml b/charts/influxdb/values.yaml
@@ -34,6 +34,9 @@ securityContext: {}
   # runAsUser: 999
   # runAsGroup: 999
 
+containerSecurityContext: {}
+  # readOnlyRootFilesystem: true
+
 startupProbe:
   enabled: false
   # path: "/ping"