Make deployment securityContext configurable via values.yaml (#1845)

SeleniumHQ · May 16, 2023 · 6d9c939 · 6d9c939
1 parent 356765f
commit 6d9c939
Show file tree

Hide file tree

Showing 11 changed files with 242 additions and 188 deletions.
diff --git a/charts/selenium-grid/README.md b/charts/selenium-grid/README.md
diff --git a/charts/selenium-grid/templates/chrome-node-deployment.yaml b/charts/selenium-grid/templates/chrome-node-deployment.yaml
@@ -62,6 +62,9 @@ spec:
         {{- with .Values.chromeNode.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.chromeNode.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
         {{- with .Values.chromeNode.lifecycle }}
           lifecycle: {{- toYaml . | nindent 12 }}
         {{- end }}

diff --git a/charts/selenium-grid/templates/distributor-deployment.yaml b/charts/selenium-grid/templates/distributor-deployment.yaml
@@ -53,6 +53,9 @@ spec:
         {{- with .Values.components.distributor.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.components.distributor.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- if or .Values.global.seleniumGrid.imagePullSecret .Values.components.distributor.imagePullSecret }}
       imagePullSecrets:
         - name: {{ default .Values.global.seleniumGrid.imagePullSecret .Values.components.distributor.imagePullSecret }}

diff --git a/charts/selenium-grid/templates/edge-node-deployment.yaml b/charts/selenium-grid/templates/edge-node-deployment.yaml
@@ -62,6 +62,9 @@ spec:
         {{- with .Values.edgeNode.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.edgeNode.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
         {{- with .Values.edgeNode.lifecycle }}
           lifecycle: {{- toYaml . | nindent 12 }}
         {{- end }}

diff --git a/charts/selenium-grid/templates/event-bus-deployment.yaml b/charts/selenium-grid/templates/event-bus-deployment.yaml
@@ -46,6 +46,9 @@ spec:
         {{- with .Values.components.eventBus.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.components.eventBus.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- with .Values.components.eventBus.nodeSelector }}
       nodeSelector: {{- toYaml . | nindent 8 }}
     {{- end }}

diff --git a/charts/selenium-grid/templates/firefox-node-deployment.yaml b/charts/selenium-grid/templates/firefox-node-deployment.yaml
@@ -62,6 +62,9 @@ spec:
         {{- with .Values.firefoxNode.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.firefoxNode.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
         {{- with .Values.firefoxNode.lifecycle }}
           lifecycle: {{- toYaml . | nindent 12 }}
         {{- end }}

diff --git a/charts/selenium-grid/templates/hub-deployment.yaml b/charts/selenium-grid/templates/hub-deployment.yaml
@@ -74,6 +74,9 @@ spec:
         {{- with .Values.hub.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.hub.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- with .Values.hub.nodeSelector }}
       nodeSelector: {{- toYaml . | nindent 8 }}
     {{- end }}

diff --git a/charts/selenium-grid/templates/router-deployment.yaml b/charts/selenium-grid/templates/router-deployment.yaml
@@ -79,6 +79,9 @@ spec:
         {{- with .Values.components.router.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.components.router.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- with .Values.components.router.nodeSelector }}
       nodeSelector: {{- toYaml . | nindent 8 }}
     {{- end }}

diff --git a/charts/selenium-grid/templates/session-map-deployment.yaml b/charts/selenium-grid/templates/session-map-deployment.yaml
@@ -44,6 +44,9 @@ spec:
         {{- with .Values.components.sessionMap.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.components.sessionMap.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- with .Values.components.sessionMap.nodeSelector }}
       nodeSelector: {{- toYaml . | nindent 8 }}
     {{- end }}

diff --git a/charts/selenium-grid/templates/session-queuer-deployment.yaml b/charts/selenium-grid/templates/session-queuer-deployment.yaml
@@ -42,6 +42,9 @@ spec:
         {{- with .Values.components.sessionQueue.resources }}
           resources: {{- toYaml . | nindent 12 }}
         {{- end }}
+        {{- with .Values.components.sessionQueue.securityContext }}
+          securityContext: {{- toYaml . | nindent 12 }}
+        {{- end }}
     {{- with .Values.components.sessionQueue.nodeSelector }}
       nodeSelector: {{- toYaml . | nindent 8 }}
     {{- end }}

diff --git a/charts/selenium-grid/values.yaml b/charts/selenium-grid/values.yaml
@@ -71,6 +71,8 @@ components:
       successThreshold: 1
     # Resources for router container
     resources: {}
+    # SecurityContext for router container
+    securityContext: {}
     # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
     serviceType: ClusterIP
     # Set specific loadBalancerIP when serviceType is LoadBalancer (see https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer)
@@ -102,6 +104,8 @@ components:
     port: 5553
     # Resources for Distributor container
     resources: {}
+    # SecurityContext for Distributor container
+    securityContext: {}
     # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
     serviceType: ClusterIP
     # Custom annotations for Distributor service
@@ -135,6 +139,8 @@ components:
     subscribePort: 4443
     # Resources for event-bus container
     resources: {}
+    # SecurityContext for event-bus container
+    securityContext: {}
     # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
     serviceType: ClusterIP
     # Custom annotations for Event Bus service
@@ -163,6 +169,8 @@ components:
     port: 5556
     # Resources for Session Map container
     resources: {}
+    # SecurityContext for Session Map container
+    securityContext: {}
     # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
     serviceType: ClusterIP
     # Custom annotations for Session Map service
@@ -191,6 +199,8 @@ components:
     port: 5559
     # Resources for Session Queue container
     resources: {}
+    # SecurityContext for Session Queue container
+    securityContext: {}
     # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
     serviceType: ClusterIP
     # Custom annotations for Session Queue service
@@ -280,6 +290,8 @@ hub:
     #   name: mysecret
   # Resources for selenium-hub container
   resources: {}
+  # SecurityContext for selenium-hub container
+  securityContext: {}
   # Kubernetes service type (see https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types)
   serviceType: ClusterIP
   # Set specific loadBalancerIP when serviceType is LoadBalancer (see https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer)
@@ -333,6 +345,8 @@ chromeNode:
     limits:
       memory: "1Gi"
       cpu: "1"
+  # SecurityContext for chrome-node container
+  securityContext: {}
   # Tolerations for chrome-node pods
   tolerations: []
   # Node selector for chrome-node pods
@@ -449,6 +463,8 @@ firefoxNode:
     limits:
       memory: "1Gi"
       cpu: "1"
+  # SecurityContext for firefox-node container
+  securityContext: {}
   # Custom host aliases for firefox nodes
   hostAliases:
     # - ip: "198.51.100.0"
@@ -560,6 +576,8 @@ edgeNode:
     limits:
       memory: "1Gi"
       cpu: "1"
+  # SecurityContext for edge-node container
+  securityContext: {}
   # Custom host aliases for edge nodes
   hostAliases:
     # - ip: "198.51.100.0"