This PR adds two variables which allow to customize securityContext:
operator.securityContext (for the container level)
operator.podSecurityContext (for the pod level)
These vars have default values, which are backward compatible with previous behavior: both readOnlyRootFilesystem: true and runAsUser: 2000 are preserved. New values added by default do not break the functionality and only improve the security posture of the operator pod in runtime.
Closes #236
This PR adds two variables which allow to customize securityContext:
operator.securityContext
(for the container level)operator.podSecurityContext
(for the pod level)These vars have default values, which are backward compatible with previous behavior: both
readOnlyRootFilesystem: true
andrunAsUser: 2000
are preserved. New values added by default do not break the functionality and only improve the security posture of the operator pod in runtime.Ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
All Submissions:
closes #XXXX
in your comment to auto-close the issue that your PR fixes (if such).