charts: Permit setting hostUsers for deployment

[jcpunk]

Summary

Adds a flag for folks to opt into user namespaces.

Changes

• Added flag to values.yaml and deployment.yaml

Steps to Test

1. render chart, get current kubernetes default
2. change hostUsers
3. render chart, get new value

Notes for the Reviewer

https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/

[Copilot]

Pull request overview

This pull request adds support for configuring the Kubernetes hostUsers field in Headlamp pod specifications, allowing users to opt into user namespace isolation for enhanced security. The default value of true maintains backward compatibility by keeping the current behavior (user namespaces disabled).

Changes:

• Added hostUsers configuration flag to values.yaml with a default value of true
• Updated deployment template to include the hostUsers field in the pod spec
• Updated all 19 test expected output files to include the new hostUsers field

Reviewed changes

Copilot reviewed 21 out of 21 changed files in this pull request and generated 2 comments.

File	Description
charts/headlamp/values.yaml	Adds new hostUsers configuration field with default value of true and minimal documentation
charts/headlamp/templates/deployment.yaml	Incorporates hostUsers value from configuration into pod spec
charts/headlamp/tests/expected_templates/*.yaml	Updates all test expected outputs to include hostUsers: true in pod specs

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[jcpunk]

In theory, copilot's review has been addressed.

[illume]

Can you please add some docs for this to the charts/README.md ?

I'm wondering what the impact will be on existing users of the charts?

[Copilot]

Pull request overview

Copilot reviewed 23 out of 23 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[jcpunk]

I've updated the documentation. Since it defaults to the current kubernetes default setting, I don't think existing users will notice any change. It will start letting folks opt-in to user namespaces.

[illume]

@jcpunk thanks for that. Are you able to see about the github check failure?

make helm-template-test

[jcpunk]

perhaps that is better

[ashu8912]

Hii @jcpunk the test seems to be failing can you take a look

[jcpunk]

Looks like my editor strips trailing white space by default.

Updated the snapshots with a different tool so the spaces remain.

[illume]

🎉 thanks!

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: illume, jcpunk

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [illume]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment