Add support for speaker securityContext

Signed-off-by: Micah Nagel <micah.nagel@defenseunicorns.com>
metallb · Oct 2, 2023 · 03f49bc · 03f49bc
1 parent 091a5eb
commit 03f49bc
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/charts/metallb/README.md b/charts/metallb/README.md
@@ -144,6 +144,7 @@ Kubernetes: `>= 1.19.0-0`
 | speaker.reloader.resources | object | `{}` |  |
 | speaker.resources | object | `{}` |  |
 | speaker.runtimeClassName | string | `""` |  |
+| speaker.securityContext | object | `{}` |  |
 | speaker.serviceAccount.annotations | object | `{}` |  |
 | speaker.serviceAccount.create | bool | `true` |  |
 | speaker.serviceAccount.name | string | `""` |  |

diff --git a/charts/metallb/templates/speaker.yaml b/charts/metallb/templates/speaker.yaml
@@ -154,6 +154,10 @@ spec:
       serviceAccountName: {{ template "metallb.speaker.serviceAccountName" . }}
       terminationGracePeriodSeconds: 0
       hostNetwork: true
+      {{- if .Values.speaker.securityContext }}
+      securityContext:
+        {{- toYaml .Values.speaker.securityContext | nindent 8 }}
+      {{- end }}
       volumes:
       {{- if .Values.speaker.memberlist.enabled }}
         - name: memberlist

diff --git a/charts/metallb/values.yaml b/charts/metallb/values.yaml
@@ -282,6 +282,7 @@ speaker:
     # true, a name is generated using the fullname template
     name: ""
     annotations: {}
+  securityContext: {}
   ## Defines a secret name for the controller to generate a memberlist encryption secret
   ## By default secretName: {{ "metallb.fullname" }}-memberlist
   ##