Merge pull request #65 from cgroschupp/feat/add-securityContext

Add securityContext to deployment

Author: skriss

charts/velero/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: 1.2.0
 description: A Helm chart for velero
 name: velero
-version: 2.8.9
+version: 2.8.10
 home: https://github.com/vmware-tanzu/velero
 icon: https://cdn-images-1.medium.com/max/1600/1*-9mb3AKnKdcL_QD3CMnthQ.png
 sources:

charts/velero/templates/deployment.yaml

@@ -135,6 +135,10 @@ spec:
         {{- if .Values.extraVolumes }}
         {{- toYaml .Values.extraVolumes | nindent 8 }}
         {{- end }}
+    {{- with .Values.securityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+    {{- end }}
     {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

charts/velero/templates/restic-daemonset.yaml

@@ -104,6 +104,9 @@ spec:
           {{- end }}
           securityContext:
             privileged: {{ .Values.restic.privileged }}
+            {{- with .Values.restic.securityContext }}
+              {{- toYaml . | nindent 12 }}
+            {{- end }}
           {{- with .Values.restic.resources }}
           resources:
             {{- toYaml . | nindent 12 }}

charts/velero/values.yaml

@@ -28,6 +28,12 @@ initContainers: []
   #     - mountPath: /target
   #       name: plugins
 
+# SecurityContext to use for the Velero deployment. Optional.
+# Set fsGroup for `AWS IAM Roles for Service Accounts`
+# see more informations at: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html
+securityContext: {}
+  # fsGroup: 1337
+
 # Tolerations to use for the Velero deployment. Optional.
 tolerations: []
 
@@ -196,6 +202,12 @@ restic:
   # Extra volumeMounts for the Restic daemonset. Optional.
   extraVolumeMounts: []
 
+  # SecurityContext to use for the Velero deployment. Optional.
+  # Set fsGroup for `AWS IAM Roles for Service Accounts`
+  # see more informations at: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html
+  securityContext: {}
+    # fsGroup: 1337
+
 # Backup schedules to create.
 # Eg:
 # schedules: