[fluentd-elasticsearch] Support for securityContext (#106)

* Added ability to specify securityContext Signed-off-by: Nick Zolotarov <[email protected]> * Update README.md Signed-off-by: Nick Zolotarov <[email protected]> * [fluentd-elasticsearch] Added ability to specify securityContext (#93) - version bump Signed-off-by: Nick Zolotarov <[email protected]> Co-authored-by: André Bauer <[email protected]>
kokuwaio · Apr 20, 2022 · 33e79ee · 33e79ee
1 parent 7b0969a
commit 33e79ee
Show file tree

Hide file tree

Showing 4 changed files with 10 additions and 1 deletion.
diff --git a/charts/fluentd-elasticsearch/Chart.yaml b/charts/fluentd-elasticsearch/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: fluentd-elasticsearch
-version: 13.4.0
+version: 13.5.0
 appVersion: 4.0.0
 type: application
 home: https://www.fluentd.org/

diff --git a/charts/fluentd-elasticsearch/README.md b/charts/fluentd-elasticsearch/README.md
@@ -55,6 +55,7 @@ The following table lists the configurable parameters of the Fluentd elasticsear
 | `affinity`                                              | Optional daemonset affinity                                                       | `{}`                                                |
 | `annotations`                                           | Optional daemonset annotations                                                    | `NULL`                                              |
 | `podAnnotations`                                        | Optional daemonset's pods annotations                                             | `NULL`                                              |
+| `securityContext`                                       | Optional a security context for a Pod                                             | `{}`                                                |
 | `configMaps.useDefaults.systemConf`                     | Use default system.conf                                                           | `true`                                              |
 | `configMaps.useDefaults.containersInputConf`            | Use default containers.input.conf                                                 | `true`                                              |
 | `configMaps.useDefaults.containersKeepTimeKey`          | Keep the container log timestamp as part of the log data.                         | `false`                                             |

diff --git a/charts/fluentd-elasticsearch/templates/daemonset.yaml b/charts/fluentd-elasticsearch/templates/daemonset.yaml
@@ -35,6 +35,10 @@ spec:
         - name: {{ . }}
       {{- end }}
       {{- end }}
+{{- if .Values.securityContext }}
+      securityContext:
+{{ toYaml .Values.securityContext | indent 8 }}
+{{- end }}
       containers:
       - name: {{ include "fluentd-elasticsearch.fullname" . }}
         image:  "{{ .Values.image.repository }}:{{ .Values.image.tag }}"

diff --git a/charts/fluentd-elasticsearch/values.yaml b/charts/fluentd-elasticsearch/values.yaml
@@ -222,6 +222,10 @@ podAnnotations: {}
   # prometheus.io/scrape: "true"
   # prometheus.io/port: "24231"
 
+securityContext: {}
+  # seLinuxOptions:
+  #   type: spc_t
+
 ## DaemonSet update strategy
 ## Ref: https://kubernetes.io/docs/tasks/manage-daemon/update-daemon-set/
 updateStrategy: