From: Krzysztof Opasiak <k.opasiak@samsung.com>
Date: Fri, 22 May 2020 14:35:36 +0000 (+0000)
Subject: Merge "[COMMON] Security Context templates"
X-Git-Tag: 7.0.0~420
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=a1365a751a5f9bfa4acaa6812c90291979102a6b;hp=1021eeb438aaede0d3f581d05ef8793611e1a765;p=oom.git

Merge "[COMMON] Security Context templates"
---

diff --git a/kubernetes/common/common/templates/_pod.tpl b/kubernetes/common/common/templates/_pod.tpl
index d3fc25ad6e..de2548562d 100644
--- a/kubernetes/common/common/templates/_pod.tpl
+++ b/kubernetes/common/common/templates/_pod.tpl
@@ -47,3 +47,24 @@
 {{-     end }}
 {{-   end }}
 {{- end -}}
+
+{{/*
+   Generate securityContext for pod
+*/}}
+{{- define "common.podSecurityContext" -}}
+securityContext:
+  runAsUser: {{ .Values.securityContext.user_id }}
+  runAsGroup: {{ .Values.securityContext.group_id }}
+  fsGroup: {{ .Values.securityContext.group_id }}
+{{- end }}
+
+{{/*
+   Generate securityContext for container
+*/}}
+{{- define "common.containerSecurityContext" -}}
+securityContext:
+  readOnlyRootFilesystem: true
+  privileged: false
+  allowPrivilegeEscalation: false
+{{- end }}
+