mongodb / helm-charts

Apache License 2.0
99 stars 92 forks source link

[community-operator] Add support of securityContext for operator pod and container #237

Closed legal90 closed 1 year ago

legal90 commented 1 year ago

Closes #236

This PR adds two variables which allow to customize securityContext:

These vars have default values, which are backward compatible with previous behavior: both readOnlyRootFilesystem: true and runAsUser: 2000 are preserved. New values added by default do not break the functionality and only improve the security posture of the operator pod in runtime.

Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/

All Submissions:

slaskawi commented 1 year ago

Thanks for the contribution @legal90 !

legal90 commented 1 year ago

@slaskawi Thank you! Could you please release a new version of the community-operator chart with this PR included?