Merge pull request #44 from bryopsida/26-add-optional-securitycontext-patching

Add optional, disabled by default, capability to patch security contexts

Author: bryopsida

charts/patchwork/Chart.lock

@@ -2,5 +2,8 @@ dependencies:
 - name: redis
   repository: https://groundhog2k.github.io/helm-charts/
   version: 0.6.12
-digest: sha256:63d822d52425251da228046b414e0e7b81cddb44c216291934b8959fd4bad8bd
-generated: "2023-06-18T08:08:56.361031-05:00"
+- name: psa-restricted-patcher
+  repository: https://bryopsida.github.io/psa-restricted-patcher/
+  version: 0.10.0
+digest: sha256:2d78700b07cd65fb043c739b9f89aa7572b252fdfd3f490feab45c25659c3b56
+generated: "2023-07-02T06:59:56.647998-05:00"

charts/patchwork/Chart.yaml

@@ -2,11 +2,16 @@ apiVersion: v2
 name: patchwork
 description: Watches deployments, daemonsets, and statefulsets for image updates and will automatically trigger rollouts to pull in updates
 type: application
-version: 0.7.0
+version: 0.8.0
 appVersion: '0.4.0'
 dependencies:
   - name: redis
     repository: https://groundhog2k.github.io/helm-charts/
     version: 0.6.12
+  - name: psa-restricted-patcher
+    repository: https://bryopsida.github.io/psa-restricted-patcher/
+    version: 0.10.0
+    condition: psaPatcher.enabled
+    alias: psaPatcher
 maintainers:
   - name: bryopsida

charts/patchwork/README.md

@@ -1,6 +1,6 @@
 # patchwork
 
-![Version: 0.7.0](https://img.shields.io/badge/Version-0.7.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.4.0](https://img.shields.io/badge/AppVersion-0.4.0-informational?style=flat-square)
+![Version: 0.8.0](https://img.shields.io/badge/Version-0.8.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.4.0](https://img.shields.io/badge/AppVersion-0.4.0-informational?style=flat-square)
 
 Watches deployments, daemonsets, and statefulsets for image updates and will automatically trigger rollouts to pull in updates
 
@@ -14,6 +14,7 @@ Watches deployments, daemonsets, and statefulsets for image updates and will aut
 
 | Repository | Name | Version |
 |------------|------|---------|
+| https://bryopsida.github.io/psa-restricted-patcher/ | psaPatcher(psa-restricted-patcher) | 0.10.0 |
 | https://groundhog2k.github.io/helm-charts/ | redis | 0.6.12 |
 
 ## Values
@@ -42,6 +43,8 @@ Watches deployments, daemonsets, and statefulsets for image updates and will aut
 | podAnnotations | object | `{}` |  |
 | podSecurityContext.fsGroup | int | `1001` |  |
 | podSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
+| psaPatcher | object | `{"enabled":false}` | control the psa-restricted-patcher behavior, disabled by default, for more information see: https://artifacthub.io/packages/helm/psa-restricted-patcher/psa-restricted-patcher |
+| psaPatcher.enabled | bool | `false` | enable the psa patcher |
 | rbac.create | string | `"truewq"` |  |
 | redis.image.pullPolicy | string | `"Always"` |  |
 | redis.image.registry | string | `"ghcr.io"` |  |

charts/patchwork/charts/psa-restricted-patcher-0.10.0.tgz

@@ -93,3 +93,7 @@ redis:
     repository: bryopsida/redis
     tag: main
     pullPolicy: Always
+# -- control the psa-restricted-patcher behavior, disabled by default, for more information see: https://artifacthub.io/packages/helm/psa-restricted-patcher/psa-restricted-patcher
+psaPatcher:
+  # -- enable the psa patcher
+  enabled: false