operator: allow setting security context on the deployment

redpanda-data / helm-charts

Redpanda Helm Chart

http://redpanda.com

Apache License 2.0

77 stars 96 forks source link

operator: allow setting security context on the deployment #1487

Closed chrisseto closed 2 months ago

chrisseto commented 3 months ago

The operator's chart does not currently allow setting either the Pod nor container security contexts. While this can be worked around with a Kustomize post-render step, it would be ideal to support this directly in the chart itself.

JIRA Link: K8S-316

DarranCooke commented 2 months ago

Additional config details from the customer

Only thing we have configured there is avoid scheduling on same pod as redpanda brokers affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution:

topologyKey: kubernetes.io/hostname labelSelector: matchLabels: app.kubernetes.io/name: redpanda app.kubernetes.io/instance: redpanda app.kubernetes.io/component: redpanda-statefulset

RafalKorepta commented 2 months ago

It should be possible to set security context in operator helm chart version 0.4.29

Example of usage: https://github.com/redpanda-data/helm-charts/blob/182bd51aeaaf2c53a86d9b5fd39a92be48ea5689/charts/operator/testdata/template-cases.txtar#L11-L31