Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make Pod securityContext configurable in antrea Helm chart #5718

Conversation

antoninbas
Copy link
Contributor

When running on some K8s distributions, users may want to adjust the securityContext for antrea-agent containers. This is reserved for "power users", and most users should not modify the default values. When modifying the securityContext, some Antrea functions may break.

For #5707

When running on some K8s distributions, users may want to adjust the
securityContext for antrea-agent containers. This is reserved for "power
users", and most users should not modify the default values. When
modifying the securityContext, some Antrea functions may break.

For antrea-io#5707

Signed-off-by: Antonin Bas <abas@vmware.com>
@antoninbas antoninbas requested a review from tnqn November 16, 2023 16:41
Copy link
Member

@tnqn tnqn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Comment on lines +109 to +112
{{- range $k, $v := .Values.agent.installCNI.extraEnv }}
- name: {{ $k | quote }}
value: {{ $v | quote }}
{{- end }}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what env vars will it be used to inject? For skipping loading OVS module?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, I was thinking that it was a possible option. But in the context of this PR, I just wanted to address the discrepancy with the antrea-agent container.

@antoninbas
Copy link
Contributor Author

/test-all

1 similar comment
@antoninbas
Copy link
Contributor Author

/test-all

@antoninbas antoninbas merged commit ac314f0 into antrea-io:main Nov 20, 2023
48 of 55 checks passed
@antoninbas antoninbas deleted the make-pod-securityContext-configurable-in-helm-chart branch November 20, 2023 22:35
@antoninbas antoninbas mentioned this pull request Nov 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants