Add global security context

This commit is contained in:
Zoe Roux 2026-03-19 14:07:01 +01:00
parent c1afbfef7f
commit 6e3ba34fe5
No known key found for this signature in database
7 changed files with 16 additions and 14 deletions

View File

@ -107,7 +107,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.api.kyoo_api.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.api.kyoo_api.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -153,7 +153,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.auth.kyoo_auth.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.auth.kyoo_auth.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -73,7 +73,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.front.kyoo_front.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.front.kyoo_front.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -118,7 +118,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.scanner.kyoo_scanner.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.scanner.kyoo_scanner.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -78,7 +78,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.traefikproxy.traefik.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.traefikproxy.traefik.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -125,7 +125,7 @@ spec:
resources:
{{- toYaml . | nindent 12 }}
{{- end }}
{{- with .Values.transcoder.kyoo_transcoder.containerSecurityContext }}
{{- with (mergeOverwrite (deepCopy .Values.global.containerSecurityContext) .Values.transcoder.kyoo_transcoder.containerSecurityContext) }}
securityContext:
{{- toYaml . | nindent 12 }}
{{- end }}

View File

@ -13,6 +13,8 @@ global:
persistentVolumeClaimAnnotations: {}
podAnnotations: {}
podLabels: {}
securityContext: {}
containerSecurityContext: {}
extraEnv: []
extraVolumes: []
extraVolumeMounts: []
@ -442,14 +444,14 @@ traefikproxy:
containerSecurityContext: {}
extraVolumeMounts: []
extraArgs:
- '--entryPoints.web.address=:80/tcp'
- '--entryPoints.websecure.address=:443/tcp'
- '--entryPoints.web.forwardedHeaders.insecure=true'
- '--entryPoints.websecure.forwardedHeaders.insecure=true'
- '--api.dashboard=true'
- '--api.insecure=true'
- '--log.level=INFO'
- '--providers.file.filename=/dynamic_config/dynamic_config.yaml'
- "--entryPoints.web.address=:80/tcp"
- "--entryPoints.websecure.address=:443/tcp"
- "--entryPoints.web.forwardedHeaders.insecure=true"
- "--entryPoints.websecure.forwardedHeaders.insecure=true"
- "--api.dashboard=true"
- "--api.insecure=true"
- "--log.level=INFO"
- "--providers.file.filename=/dynamic_config/dynamic_config.yaml"
extraEnv: []
image:
repository: docker.io/traefik