diff --git a/helm-charts/mend-renovate-ce/templates/deployment.yaml b/helm-charts/mend-renovate-ce/templates/deployment.yaml index 890647e9..a5b0744b 100644 --- a/helm-charts/mend-renovate-ce/templates/deployment.yaml +++ b/helm-charts/mend-renovate-ce/templates/deployment.yaml @@ -37,6 +37,9 @@ spec: - name: {{ .Chart.Name }} image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" imagePullPolicy: {{ .Values.image.pullPolicy }} + {{- with .Values.containerSecurityContext }} + securityContext: {{ toYaml . | nindent 10 }} + {{- end }} env: {{- with .Values.renovate.extraEnvVars }} {{- toYaml . | nindent 12 }} diff --git a/helm-charts/mend-renovate-ce/values.yaml b/helm-charts/mend-renovate-ce/values.yaml index cc7fc16c..38312c65 100644 --- a/helm-charts/mend-renovate-ce/values.yaml +++ b/helm-charts/mend-renovate-ce/values.yaml @@ -183,6 +183,8 @@ affinity: {} podSecurityContext: {} +containerSecurityContext: {} + # This allows renovate to finish running for a repo and then gracefully exit terminationGracePeriodSeconds: 60 diff --git a/helm-charts/mend-renovate-ee/templates/deployment-server.yaml b/helm-charts/mend-renovate-ee/templates/deployment-server.yaml index db40a971..7b174d80 100644 --- a/helm-charts/mend-renovate-ee/templates/deployment-server.yaml +++ b/helm-charts/mend-renovate-ee/templates/deployment-server.yaml @@ -39,6 +39,9 @@ spec: - name: {{ .Chart.Name }}-server image: "{{ .Values.renovateServer.image.repository }}:{{ .Values.renovateServer.image.tag }}" imagePullPolicy: {{ .Values.renovateServer.image.pullPolicy }} + {{- with .Values.containerSecurityContext }} + securityContext: {{ toYaml . | nindent 10 }} + {{- end }} env: {{- with .Values.renovateServer.extraEnvVars }} {{- toYaml . | nindent 12 }} diff --git a/helm-charts/mend-renovate-ee/values.yaml b/helm-charts/mend-renovate-ee/values.yaml index c7f50fa0..775da7d5 100644 --- a/helm-charts/mend-renovate-ee/values.yaml +++ b/helm-charts/mend-renovate-ee/values.yaml @@ -94,6 +94,8 @@ renovateServer: podSecurityContext: { } + containerSecurityContext: { } + # This allows renovate to finish running for a repo and then gracefully exit terminationGracePeriodSeconds: 60