Disabled NATS security context (#16728)

kyma-project · Feb 3, 2023 · da8c9bf · da8c9bf
1 parent e04e69b
commit da8c9bf
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/resources/eventing/charts/nats/templates/statefulset.yaml b/resources/eventing/charts/nats/templates/statefulset.yaml
@@ -48,7 +48,7 @@ spec:
 {{- if or .Values.priorityClassName .Values.global.priorityClassName }}
       priorityClassName: {{ coalesce .Values.priorityClassName .Values.global.priorityClassName }}
 {{- end }}
-{{- if .Values.global.podSecurityContext }}
+{{- if and .Values.global.natsSecurityContextEnabled .Values.global.podSecurityContext }}
       securityContext: {{ toYaml .Values.global.podSecurityContext | nindent 8 }}
 {{- end }}
 {{- with .Values.affinity }}
@@ -97,7 +97,7 @@ spec:
       - name: config-reloader
         image: "{{ include "imageurl" (dict "reg" .Values.global.containerRegistry "img" .Values.global.images.nats_config_reloader) }}"
         imagePullPolicy: {{ .Values.nats.pullPolicy }}
-        {{- if .Values.global.containerSecurityContext }}
+        {{- if and .Values.global.natsSecurityContextEnabled .Values.global.containerSecurityContext }}
         securityContext: {{- toYaml .Values.global.containerSecurityContext | nindent 10 }}
         {{- end }}
         command:
@@ -125,7 +125,7 @@ spec:
       - name: metrics
         image: "{{ include "imageurl" (dict "reg" .Values.global.containerRegistry "img" .Values.global.images.prometheus_nats_exporter) }}"
         imagePullPolicy: {{ .Values.exporter.pullPolicy }}
-        {{- if .Values.global.containerSecurityContext }}
+        {{- if and .Values.global.natsSecurityContextEnabled .Values.global.containerSecurityContext }}
         securityContext: {{- toYaml .Values.global.containerSecurityContext | nindent 10 }}
         {{- end }}
         resources:
@@ -146,7 +146,7 @@ spec:
       - name: nats
         image: "{{ include "imageurl" (dict "reg" .Values.global.containerRegistry "img" .Values.global.images.nats) }}"
         imagePullPolicy: {{ .Values.nats.pullPolicy }}
-        {{- if .Values.global.containerSecurityContext }}
+        {{- if and .Values.global.natsSecurityContextEnabled .Values.global.containerSecurityContext }}
         securityContext: {{- toYaml .Values.global.containerSecurityContext | nindent 10 }}
         {{- end }}
         resources:

diff --git a/resources/eventing/values.yaml b/resources/eventing/values.yaml
@@ -45,6 +45,8 @@ global:
       statusPort: 15020
       portName: status
 
+  natsSecurityContextEnabled: false
+
   podSecurityContext:
     fsGroup: 10001
     runAsUser: 10001