[prometheus-mongodb-exporter] Allow to configure pod security context

Signed-off-by: Yves Galante <yves.galante@zelros.com>
prometheus-community · Dec 23, 2024 · a6f9a9c · a6f9a9c
1 parent 619b91c
commit a6f9a9c
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 2 deletions.
diff --git a/charts/prometheus-mongodb-exporter/Chart.yaml b/charts/prometheus-mongodb-exporter/Chart.yaml
@@ -15,4 +15,4 @@ maintainers:
 name: prometheus-mongodb-exporter
 sources:
   - https://github.com/percona/mongodb_exporter
-version: 3.10.0
+version: 3.11.0
diff --git a/charts/prometheus-mongodb-exporter/ci/podsecuritycontext-values.yaml b/charts/prometheus-mongodb-exporter/ci/podsecuritycontext-values.yaml
@@ -0,0 +1,9 @@
+---
+# Test customize podSecurityContext
+
+mongodb:
+  uri: mongodb://localhost:9216
+
+podSecurityContext:
+  seccompProfile:
+    type: RuntimeDefault
diff --git a/charts/prometheus-mongodb-exporter/templates/deployment.yaml b/charts/prometheus-mongodb-exporter/templates/deployment.yaml
@@ -82,6 +82,10 @@ spec:
       {{- end }}
       imagePullSecrets:
         {{- toYaml .Values.imagePullSecrets | nindent 8 }}
+      {{- with .Values.podSecurityContext }}
+      securityContext:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- tpl (toYaml .) $ | nindent 8 }}

diff --git a/charts/prometheus-mongodb-exporter/values.yaml b/charts/prometheus-mongodb-exporter/values.yaml
@@ -71,10 +71,17 @@ resources: {}
   #   cpu: 100m
   #   memory: 128Mi
 
+# Customize securityContext of the pod.
+# See https://kubernetes.io/docs/concepts/policy/security-context/ for more.
+podSecurityContext: {}
+  # seccompProfile:
+  #  type: RuntimeDefault
+
 securityContext:
   allowPrivilegeEscalation: false
   capabilities:
-    drop: ["all"]
+    drop:
+      - ALL
   readOnlyRootFilesystem: true
   runAsGroup: 10000
   runAsNonRoot: true