Add support for arbitrary pod-level securityContext settings

This allows for doing stuff like this on the custom resource:

```
security_context_settings:
  runAsUser: 1000
  runAsGroup: 0
```

I added `snakeCaseParameters: False` because without it, variables like `runAsUser` become `run_as_user`... and that doesnt work.
This commit is contained in:
Shane McDonald
2021-11-10 19:06:20 +08:00
parent b2479c8014
commit 138964f7ab
4 changed files with 15 additions and 1 deletions

View File

@@ -408,6 +408,10 @@ spec:
x-kubernetes-preserve-unknown-fields: true
type: object
type: array
security_context_settings:
description: Key/values that will be set under the pod-level securityContext field
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
status:
properties:

View File

@@ -235,3 +235,5 @@ bundle_cacert_secret: ''
garbage_collect_secrets: false
development_mode: false
security_context_settings: {}

View File

@@ -310,9 +310,14 @@ spec:
tolerations:
{{ tolerations | indent(width=8) }}
{% endif %}
{% if projects_persistence|bool %}
{% if projects_persistence|bool or (security_context_settings|length) %}
securityContext:
{% if projects_persistence|bool %}
fsGroup: 1000
{% endif %}
{% if security_context_settings|length %}
{{ security_context_settings | to_nice_yaml | indent(8) }}
{% endif %}
{% endif %}
volumes:
{% if bundle_ca_crt %}

View File

@@ -4,14 +4,17 @@
group: awx.ansible.com
kind: AWX
role: installer
snakeCaseParameters: False
- version: v1beta1
group: awx.ansible.com
kind: AWXBackup
role: backup
snakeCaseParameters: False
- version: v1beta1
group: awx.ansible.com
kind: AWXRestore
role: restore
snakeCaseParameters: False
# +kubebuilder:scaffold:watch