refactor: add security context (#209)

GreptimeTeam · Nov 11, 2024 · b391b6e · b391b6e
1 parent b2f3d0c
commit b391b6e
Show file tree

Hide file tree

Showing 7 changed files with 2,670 additions and 24 deletions.
diff --git a/apis/v1alpha1/common.go b/apis/v1alpha1/common.go
@@ -178,6 +178,10 @@ type SlimPodSpec struct {
 	// List of volumes that can be mounted by containers belonging to the pod.
 	// +optional
 	Volumes []corev1.Volume `json:"volumes,omitempty"`
+
+	// SecurityContext holds pod-level security attributes and common container settings.
+	// +optional
+	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`
 }
 
 // MainContainerSpec describes the specification of the main container of a pod.
@@ -272,6 +276,10 @@ type MainContainerSpec struct {
 	// Cannot be updated.
 	// +optional
 	VolumeMounts []corev1.VolumeMount `json:"volumeMounts,omitempty"`
+
+	// SecurityContext holds container-level security attributes and common settings.
+	// +optional
+	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`
 }
 
 func (in *MainContainerSpec) GetImage() string {

diff --git a/apis/v1alpha1/zz_generated.deepcopy.go b/apis/v1alpha1/zz_generated.deepcopy.go