feat: add securityContext at podlevel

Signed-off-by: Yannic Nevado <[email protected]>
kyverno · Jul 19, 2023 · 3a5bd9c · 3a5bd9c
1 parent 3f943cd
commit 3a5bd9c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/charts/policy-reporter/charts/kyvernoPlugin/templates/deployment.yaml b/charts/policy-reporter/charts/kyvernoPlugin/templates/deployment.yaml
@@ -45,6 +45,7 @@ spec:
       imagePullSecrets:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      securityContext:  {{- toYaml .Values.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ include "kyvernoplugin.serviceAccountName" . }}
       automountServiceAccountToken: true
       containers:

diff --git a/charts/policy-reporter/charts/kyvernoPlugin/values.yaml b/charts/policy-reporter/charts/kyvernoPlugin/values.yaml
@@ -67,6 +67,9 @@ ingress:
   #  - secretName: chart-example-tls
   #    hosts:
   #      - chart-example.local
+podSecurityContext:
+  runAsUser: 1234
+  runAsGroup: 1234
 
 securityContext:
   runAsUser: 1234
@@ -140,12 +143,12 @@ logging:
 api:
   logging: false # enable debug API access logging, sets logLevel to debug
 
-# create PolicyReports for enforce policies, 
+# create PolicyReports for enforce policies,
 # based on Events created by Kyverno (>= v1.7.0)
 blockReports:
   enabled: false
   eventNamespace: default
-  results: 
+  results:
     maxPerReport: 200
     keepOnlyLatest: false