Add ability to configure pod level securityContext (#120)

* add podSecurityContext Signed-off-by: bryopsida <[email protected]> * Updated changelog Signed-off-by: bryopsida <[email protected]> * bump minor and correct change log Signed-off-by: bryopsida <[email protected]> --------- Signed-off-by: bryopsida <[email protected]>
coredns · May 18, 2023 · 27a2975 · 27a2975
1 parent 5781216
commit 27a2975
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 5 deletions.
diff --git a/charts/coredns/Chart.yaml b/charts/coredns/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: coredns
-version: 1.22.0
+version: 1.23.0
 appVersion: 1.10.1
 home: https://coredns.io
 icon: https://coredns.io/images/CoreDNS_Colour_Horizontal.png
@@ -19,7 +19,5 @@ engine: gotpl
 type: application
 annotations:
   artifacthub.io/changes: |
-    - kind: fixed
-      description: Fix assignment of NET_BIND_SERVICE capability
-    - kind: fixed
-      description: Enable use of pullSecrets with Deployment
+    - kind: added
+      description: Added podSecurityContext
diff --git a/charts/coredns/templates/deployment.yaml b/charts/coredns/templates/deployment.yaml
@@ -64,6 +64,9 @@ spec:
 {{ toYaml .Values.podAnnotations | indent 8 }}
 {{- end }}
     spec:
+      {{- if .Values.podSecurityContext }}
+      securityContext: {{ toYaml .Values.podSecurityContext | nindent 8 }}
+      {{- end }}
       {{- if .Values.terminationGracePeriodSeconds }}
       terminationGracePeriodSeconds: {{ .Values.terminationGracePeriodSeconds }}
       {{- end }}

diff --git a/charts/coredns/values.yaml b/charts/coredns/values.yaml
@@ -86,6 +86,9 @@ isClusterService: true
 # Optional priority class to be used for the coredns pods. Used for autoscaler if autoscaler.priorityClassName not set.
 priorityClassName: ""
 
+# Configure the pod level securityContext.
+podSecurityContext: {}
+
 # Configure SecurityContext for Pod.
 # Ensure that required linux capability to bind port number below 1024 is assigned (`CAP_NET_BIND_SERVICE`).
 securityContext: