The AWS provider for the Secrets Store CSI Driver allows you to fetch secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store, and mount them into Kubernetes pods.
Apache License 2.0
476
stars
134
forks
source link
Expose Additional Security Context Settings in Helm Chart #329
I am trying to deploy the secrets-store-csi-driver-provider-aws Helm Chart in a Kubernetes cluster with restricted PodSecurityAdmission (PSA). To meet the requirements of the PSA, I need to adjust the securityContext of the pods deployed by this Helm release.
Currently, the Helm chart only exposes settings for securityContext.privileged and securityContext.allowPrivilegeEscalation. Could you add options for the following securityContext settings to the Helm chart?
Hello,
I am trying to deploy the
secrets-store-csi-driver-provider-aws
Helm Chart in a Kubernetes cluster with restricted PodSecurityAdmission (PSA). To meet the requirements of the PSA, I need to adjust thesecurityContext
of the pods deployed by this Helm release.Currently, the Helm chart only exposes settings for
securityContext.privileged
andsecurityContext.allowPrivilegeEscalation
. Could you add options for the followingsecurityContext
settings to the Helm chart?securityContext.runAsNonRoot: true
securityContext.capabilities.drop: ["ALL"]
securityContext.seccompProfile.type: "RuntimeDefault"
These settings are required to meet the requirements of the restricted PSA. Your assistance in this matter would be greatly appreciated.
Thank you.