chore: add container security context to admission webhook jobs (newrelic#619)

Author: kondracek-nr

CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+### enhancements
+- Pass container security context into admission webhooks @kondracek-nr [#619](https://github.com/newrelic/k8s-metadata-injection/pull/619)
+
 ## v1.33.1 - 2025-05-05
 
 ### ⛓️ Dependencies

charts/nri-metadata-injection/templates/admission-webhooks/job-patch/job-createSecret.yaml

@@ -30,6 +30,10 @@ spec:
         - name: create
           image: {{ include "newrelic.common.images.image" ( dict "defaultRegistry" "registry.k8s.io" "imageRoot" .Values.jobImage "context" .) }}
           imagePullPolicy: {{ .Values.jobImage.pullPolicy }}
+          {{- with include "newrelic.common.securityContext.container" . }}
+          securityContext:
+            {{- . | nindent 12 }}
+          {{- end }}
           args:
             - create
             - --host={{ include "newrelic.common.naming.fullname" . }},{{ include "newrelic.common.naming.fullname" . }}.{{ .Release.Namespace }}.svc

charts/nri-metadata-injection/templates/admission-webhooks/job-patch/job-patchWebhook.yaml

@@ -30,6 +30,10 @@ spec:
         - name: patch
           image: {{ include "newrelic.common.images.image" ( dict "defaultRegistry" "registry.k8s.io" "imageRoot" .Values.jobImage "context" .) }}
           imagePullPolicy: {{ .Values.jobImage.pullPolicy }}
+          {{- with include "newrelic.common.securityContext.container" . }}
+          securityContext:
+            {{- . | nindent 12 }}
+          {{- end }}
           args:
             - patch
             - --webhook-name={{ include "newrelic.common.naming.fullname" . }}