Skip to content

feat(helm): add pod-level securityContext support for certificate mounting #19041

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Jul 29, 2025
Merged

feat(helm): add pod-level securityContext support for certificate mounting #19041

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
83c0944
added new test cases for pod_securitycontext
ausbru87 Jul 24, 2025
10bb3a1
updated _coder.yaml template to include pod level securitycontext
ausbru87 Jul 24, 2025
30fde37
new golden files from updated test cases
ausbru87 Jul 24, 2025
52a157d
updated the value.yaml example to include podSecurityContext field an…
ausbru87 Jul 24, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
added new test cases for pod_securitycontext
  • Loading branch information
@ausbru87
ausbru87 committed Jul 24, 2025
commit 83c0944d67b1a8662a641d08280446ae1292d81a
4 changes: 4 additions & 0 deletions helm/coder/tests/chart_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -125,6 +125,10 @@ var testCases = []testCase{
name: "partial_resources",
expectedError: "",
},
{
name: "pod_securitycontext",
expectedError: "",
},
}

type testCase struct {
Expand Down
8 changes: 8 additions & 0 deletions helm/coder/tests/testdata/pod_securitycontext.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
coder:
image:
tag: latest
podSecurityContext:
fsgroup: 1000
runAsUser: 1000
runAsGroup: 1000
runAsNonRoot: true