feat(operator): Add pod security context and container security conte…

…xt to dragonfly sts's pods (#255) * feat(operator) added pod security context and container security context to dragonfly sts's pods Signed-off-by: sigarus <sigarus.so@gmail.com> * feat(operator) added watch namespace(s) options: reading env variable WATCH_NAMESPACE and watch-current-namespace command line option Signed-off-by: sigarus <sigarus.so@gmail.com> --------- Signed-off-by: sigarus <sigarus.so@gmail.com>
dragonflydb · Feb 12, 2025 · 493605c · 493605c
1 parent 223d3f5
commit 493605c
Show file tree

Hide file tree

Showing 6 changed files with 872 additions and 3 deletions.
diff --git a/api/v1alpha1/dragonfly_types.go b/api/v1alpha1/dragonfly_types.go
@@ -108,6 +108,16 @@ type DragonflySpec struct {
 	// +kubebuilder:validation:Optional
 	Authentication *Authentication `json:"authentication,omitempty"`
 
+	// (Optional) Dragonfly container security context
+	// +optional
+	// +kubebuilder:validation:Optional
+	ContainerSecurityContext *corev1.SecurityContext `json:"containerSecurityContext,omitempty"`
+
+	// (Optional) Dragonfly pod security context
+	// +optional
+	// +kubebuilder:validation:Optional
+	PodSecurityContext *corev1.PodSecurityContext `json:"podSecurityContext,omitempty"`
+
 	// (Optional) Dragonfly pod service account name
 	// +optional
 	// +kubebuilder:validation:Optional

diff --git a/api/v1alpha1/zz_generated.deepcopy.go b/api/v1alpha1/zz_generated.deepcopy.go