Feature: Add support for defining custom container securityContext (#68)

* Feature: Add support for defining custom container securityContext * Bump chart version to 5.2.0
oauth2-proxy · Feb 7, 2022 · a2a7e73 · a2a7e73
1 parent 94f8c3b
commit a2a7e73
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/helm/oauth2-proxy/Chart.yaml b/helm/oauth2-proxy/Chart.yaml
@@ -1,5 +1,5 @@
 name: oauth2-proxy
-version: 5.1.0
+version: 5.2.0
 apiVersion: v2
 appVersion: 7.2.0
 home: https://oauth2-proxy.github.io/oauth2-proxy/

diff --git a/helm/oauth2-proxy/templates/deployment.yaml b/helm/oauth2-proxy/templates/deployment.yaml
@@ -189,9 +189,10 @@ spec:
 {{ toYaml .Values.extraVolumeMounts | indent 8 }}
 {{- end }}
 {{- if .Values.securityContext.enabled }}
+{{- $securityContext := unset .Values.securityContext "enabled" }}
         securityContext:
-          runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
-{{- end}}
+          {{- toYaml $securityContext | nindent 10 }}
+{{- end }}
       volumes:
 {{- with .Values.config.google }}
 {{- if and .adminEmail (or .serviceAccountJson .existingSecret) }}

diff --git a/helm/oauth2-proxy/values.yaml b/helm/oauth2-proxy/values.yaml
@@ -182,6 +182,8 @@ readinessProbe:
 securityContext:
   enabled: false
   runAsNonRoot: true
+  # allowPrivilegeEscalation: false
+  # runAsUser: 2000
 
 podAnnotations: {}
 podLabels: {}