feat(operator): Add podSecurityContext to dependent charts#191
feat(operator): Add podSecurityContext to dependent charts#191casey-coreweave wants to merge 1 commit into
Conversation
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
| install: true | ||
| podSecurityContext: | ||
| runAsNonRoot: true | ||
| runAsUser: 1000 |
There was a problem hiding this comment.
My only concern is that openshift requires not setting a runAsUser, runAsGroup, or fsGroup (openshift assigns these automatically). This will mean that the openshift overlay needs to null out those values. Aside from that, this all looks good.
Adds security contexts for Redis, Clickhouse, and Kafka pods
Future TODO: Objectstore and MySQL when those operators support them