Add security context config to logstash chart (helm#11498)

Signed-off-by: Tim Head <[email protected]>
agolo · Feb 27, 2019 · a1ba464 · a1ba464
1 parent 20bfe4e
commit a1ba464
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 3 deletions.
diff --git a/stable/logstash/Chart.yaml b/stable/logstash/Chart.yaml
@@ -3,7 +3,7 @@ description: Logstash is an open source, server-side data processing pipeline
 icon: https://www.elastic.co/assets/blt86e4472872eed314/logo-elastic-logstash-lt.svg
 home: https://www.elastic.co/products/logstash
 name: logstash
-version: 1.5.0
+version: 1.5.1
 appVersion: 6.6.0
 sources:
 - https://www.docker.elastic.co

diff --git a/stable/logstash/README.md b/stable/logstash/README.md
@@ -115,3 +115,5 @@ The following table lists the configurable parameters of the chart and its defau
 | `inputs`                        | Logstash inputs configuration                      | beats                                            |
 | `filters`                       | Logstash filters configuration                     | `nil`                                            |
 | `outputs`                       | Logstash outputs configuration                     | elasticsearch                                    |
+| `securityContext.fsGroup`                          | Group ID for the container                                                                   | `1000`                                                  |
+| `securityContext.runAsUser`                        | User ID for the container                                                                    | `1000`                                                  |
diff --git a/stable/logstash/templates/statefulset.yaml b/stable/logstash/templates/statefulset.yaml
@@ -39,8 +39,8 @@ spec:
       priorityClassName: "{{ .Values.priorityClassName }}"
       {{- end }}
       securityContext:
-        runAsUser: 1000
-        fsGroup: 1000
+        runAsUser: {{ .Values.securityContext.runAsUser }}
+        fsGroup: {{ .Values.securityContext.fsGroup }}
       {{- if .Values.image.pullSecrets }}
       imagePullSecrets:
 {{ toYaml .Values.image.pullSecrets | indent 8 }}

diff --git a/stable/logstash/values.yaml b/stable/logstash/values.yaml
@@ -90,6 +90,10 @@ nodeSelector: {}
 
 tolerations: []
 
+securityContext:
+  fsGroup: 1000
+  runAsUser: 1000
+
 affinity: {}
   # podAntiAffinity:
   #   requiredDuringSchedulingIgnoredDuringExecution: