feat: add spec.template.spec.securityContext (#1109)

* feat: add spec.template.spec.securityContext 

Signed-off-by: ChristianBieri1995 <[email protected]>

* make securityContext adjustable

Signed-off-by: ChristianBieri1995 <[email protected]>

* adjust values.yaml accordingly to enable adjustable securityContext

Signed-off-by: ChristianBieri1995 <[email protected]>

* Remove default values from securityContext

Signed-off-by: ChristianBieri1995 <[email protected]>

---------

Signed-off-by: ChristianBieri1995 <[email protected]>
Co-authored-by: Aris Boutselis <[email protected]>
Co-authored-by: Alex Jones <[email protected]>

Author: 3 people

charts/k8sgpt/templates/deployment.yaml

@@ -21,6 +21,10 @@ spec:
         app.kubernetes.io/name: {{ include "k8sgpt.name" . }}
         app.kubernetes.io/instance: {{ .Release.Name }}
     spec:
+      {{- if .Values.deployment.securityContext }}
+      securityContext:
+        {{- toYaml .Values.deployment.securityContext | nindent 8 }}
+      {{ end -}}
       serviceAccountName: {{ template "k8sgpt.fullname" . }}
       containers:
       - name: k8sgpt-container

charts/k8sgpt/values.yaml

@@ -14,7 +14,10 @@ deployment:
     requests:
       cpu: "0.2"
       memory: "156Mi"
-
+  securityContext: {}
+  # Set securityContext.runAsUser/runAsGroup if necessary. Values below were taken from https://github.com/k8sgpt-ai/k8sgpt/blob/main/container/Dockerfile
+  # runAsUser: 65532
+  # runAsGroup: 65532
 secret:
   secretKey: "" # base64 encoded OpenAI token