From c82de7750ea4807edd7f404753fd444f16ad0940 Mon Sep 17 00:00:00 2001
From: Guangning E <guangning@streamnative.io>
Date: Mon, 20 Oct 2025 09:06:53 +0800
Subject: [PATCH] Support set security for container

---
 .../streamnative-console-statefulset.yaml                   | 6 ++++++
 .../streamnative-console-statefulset.yaml                   | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/charts/sn-platform-slim/templates/streamnative-console/streamnative-console-statefulset.yaml b/charts/sn-platform-slim/templates/streamnative-console/streamnative-console-statefulset.yaml
index af36b4846..73e1a5193 100644
--- a/charts/sn-platform-slim/templates/streamnative-console/streamnative-console-statefulset.yaml
+++ b/charts/sn-platform-slim/templates/streamnative-console/streamnative-console-statefulset.yaml
@@ -75,6 +75,9 @@ spec:
         - name: "{{ template "pulsar.fullname" . }}-{{ .Values.streamnative_console.component }}"
           image: "{{ .Values.images.streamnative_console.repository }}:{{ .Values.images.streamnative_console.tag }}"
           imagePullPolicy: {{ .Values.images.streamnative_console.pullPolicy }}
+          {{- if .Values.streamnative_console.securityContext }}
+          securityContext: {{- toYaml .Values.streamnative_console.securityContext | nindent 12 }}
+          {{- end }}
           {{- if .Values.streamnative_console.resources }}
           resources:
 {{ toYaml .Values.streamnative_console.resources | indent 12 }}
@@ -252,6 +255,9 @@ spec:
         - name: "{{ template "pulsar.fullname" . }}-{{ .Values.streamnative_console.component }}-gateway"
           image: "{{ .Values.images.streamnative_console.repository }}:{{ .Values.images.streamnative_console.tag }}"
           imagePullPolicy: {{ .Values.images.streamnative_console.pullPolicy }}
+          {{- if .Values.streamnative_console.securityContext }}
+          securityContext: {{- toYaml .Values.streamnative_console.securityContext | nindent 12 }}
+          {{- end }}
           {{- if .Values.streamnative_console.resources }}
           resources:
 {{ toYaml .Values.streamnative_console.resources | indent 12 }}
diff --git a/charts/sn-platform/templates/streamnative-console/streamnative-console-statefulset.yaml b/charts/sn-platform/templates/streamnative-console/streamnative-console-statefulset.yaml
index 70fcb28ae..f3bea8a7e 100644
--- a/charts/sn-platform/templates/streamnative-console/streamnative-console-statefulset.yaml
+++ b/charts/sn-platform/templates/streamnative-console/streamnative-console-statefulset.yaml
@@ -75,6 +75,9 @@ spec:
         - name: "{{ template "pulsar.fullname" . }}-{{ .Values.streamnative_console.component }}"
           image: "{{ .Values.images.streamnative_console.repository }}:{{ .Values.images.streamnative_console.tag }}"
           imagePullPolicy: {{ .Values.images.streamnative_console.pullPolicy }}
+          {{- if .Values.streamnative_console.securityContext }}
+          securityContext: {{- toYaml .Values.streamnative_console.securityContext | nindent 12 }}
+          {{- end }}
           {{- if .Values.streamnative_console.resources }}
           resources:
 {{ toYaml .Values.streamnative_console.resources | indent 12 }}
@@ -261,6 +264,9 @@ spec:
           {{- end }}
         - name: "{{ template "pulsar.fullname" . }}-{{ .Values.streamnative_console.component }}-gateway"
           image: "{{ .Values.images.streamnative_console.repository }}:{{ .Values.images.streamnative_console.tag }}"
+          {{- if .Values.streamnative_console.securityContext }}
+          securityContext: {{- toYaml .Values.streamnative_console.securityContext | nindent 12 }}
+          {{- end }}
           imagePullPolicy: {{ .Values.images.streamnative_console.pullPolicy }}
           {{- if .Values.streamnative_console.resources }}
           resources: