Allow setting of container securityContext (#7533)

Currently this blocks deployments on clusters with global PodSecurityPolicies set Signed-off-by: Adam Graves <adam.graves85@gmail.com>
2021-11-15 21:54:49 +00:00 · 2021-11-15 21:54:49 +00:00 · 6299c39842
commit 6299c39842
parent 3c08f002f9
3 changed files with 25 additions and 8 deletions
--- a/charts/ingress-nginx/templates/controller-deployment.yaml
+++ b/charts/ingress-nginx/templates/controller-deployment.yaml
@ -80,14 +80,7 @@ spec:
        {{- end }}
          args:
            {{- include "ingress-nginx.params" . | nindent 12 }}
-          securityContext:
-            capabilities:
-                drop:
-                - ALL
-                add:
-                - NET_BIND_SERVICE
-            runAsUser: {{ .Values.controller.image.runAsUser }}
-            allowPrivilegeEscalation: {{ .Values.controller.image.allowPrivilegeEscalation }}
+          securityContext: {{ include "controller.containerSecurityContext" . | nindent 12 }}
          env:
            - name: POD_NAME
              valueFrom: