Skip to content

Commit

Permalink
helm: use podSecurityContext for rthooks
Browse files Browse the repository at this point in the history
Only use podSecurityContext for rthooks.

Signed-off-by: Kornilios Kourtis <[email protected]>
  • Loading branch information
kkourt committed Aug 28, 2024
1 parent 42c19d1 commit 37d1691
Show file tree
Hide file tree
Showing 4 changed files with 5 additions and 7 deletions.
4 changes: 2 additions & 2 deletions docs/content/en/docs/reference/helm-chart.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions install/kubernetes/tetragon/README.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 0 additions & 2 deletions install/kubernetes/tetragon/templates/_container_rthooks.tpl
Original file line number Diff line number Diff line change
@@ -1,7 +1,5 @@
{{- define "container.tetragon-rthooks" -}}
- name: tetragon-rthooks
securityContext:
{{- toYaml .Values.rthooks.securityContext | nindent 4 }}
image: "{{ if .Values.rthooks.image.override }}{{ .Values.rthooks.image.override }}{{ else }}{{ .Values.rthooks.image.repository }}:{{ .Values.rthooks.image.tag }}{{ end }}"
terminationMessagePolicy: FallbackToLogsOnError
imagePullPolicy: {{ .Values.imagePullPolicy }}
Expand Down
2 changes: 1 addition & 1 deletion install/kubernetes/tetragon/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -366,7 +366,7 @@ rthooks:
# -- priorityClassName for the Tetrargon rthooks pod
priorityClassName: ""
# -- security context for the Tetrargon rthooks pod
securityContext:
podSecurityContext:
privileged: true
# -- installDir is the host location where the tetragon-oci-hook binary will be installed
installDir: "/opt/tetragon"
Expand Down

0 comments on commit 37d1691

Please sign in to comment.