Merge pull request #355 from mjnagel/monitor-flexibility

feat: add support for monitor chart securityContext and labels
neuvector · Mar 20, 2024 · ed3bc75 · ed3bc75
2 parents 2f54ec9 + 2b1a590
commit ed3bc75
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/charts/monitor/templates/exporter-deployment.yaml b/charts/monitor/templates/exporter-deployment.yaml
@@ -23,6 +23,9 @@ spec:
       labels:
         app: neuvector-prometheus-exporter-pod
         release: {{ .Release.Name }}
+      {{- with .Values.exporter.podLabels }}
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     spec:
     {{- if .Values.imagePullSecrets }}
       imagePullSecrets:
@@ -32,6 +35,10 @@ spec:
       serviceAccountName: basic
       serviceAccount: basic
     {{- end }}
+      {{- with .Values.exporter.securityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: neuvector-prometheus-exporter-pod
           {{ if eq .Values.registry "registry.neuvector.com" }}
@@ -44,6 +51,10 @@ spec:
           image: "{{ .Values.registry }}/{{ .Values.exporter.image.repository }}:{{ .Values.exporter.image.tag }}"
           {{- end }}
           imagePullPolicy: Always
+          {{- with .Values.exporter.containerSecurityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
           env:
             - name: CTRL_API_SERVICE
               value: {{ .Values.exporter.apiSvc }}

diff --git a/charts/monitor/values.yaml b/charts/monitor/values.yaml
@@ -20,6 +20,9 @@ exporter:
     enabled: false
   ctrlSecretName: ''
   apiSvc: neuvector-svc-controller-api:10443
+  podLabels: {}
+  securityContext: {}
+  containerSecurityContext: {}
 
   svc:
     enabled: true