Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose Additional Security Context Settings in Helm Chart #329

Open
devopserio opened this issue Mar 19, 2024 · 1 comment
Open

Expose Additional Security Context Settings in Helm Chart #329

devopserio opened this issue Mar 19, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@devopserio
Copy link

Hello,

I am trying to deploy the secrets-store-csi-driver-provider-aws Helm Chart in a Kubernetes cluster with restricted PodSecurityAdmission (PSA). To meet the requirements of the PSA, I need to adjust the securityContext of the pods deployed by this Helm release.

Currently, the Helm chart only exposes settings for securityContext.privileged and securityContext.allowPrivilegeEscalation. Could you add options for the following securityContext settings to the Helm chart?

  • securityContext.runAsNonRoot: true
  • securityContext.capabilities.drop: ["ALL"]
  • securityContext.seccompProfile.type: "RuntimeDefault"

These settings are required to meet the requirements of the restricted PSA. Your assistance in this matter would be greatly appreciated.

Thank you.

@devopserio devopserio added the enhancement New feature or request label Mar 19, 2024
@jbct
Copy link

jbct commented May 6, 2024

Thank you for the report, we have noted this as an enhancement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants