hashicorp / hashicorp/vault-helm

Vault helm chart should support configuring securityContext.seccompProfile which are added in Kubenertes v1.19

Open
#469 0 comments 2 reactions 0 assignees View on GitHub
enhancement
Dominant language
Shell
Stars
1.3k
Forks
897
Avg merge
3d 1h
Merged PRs (30d)
1

Description

Vault helm chart should support configuring securityContext.seccompProfile which added in Kubenertes v1.19

**Describe the solution you'd like**
Vault helm chart should support for adding securityContext using values.yaml
securityContext:
seccompProfile:
type: RuntimeDefault

**Describe alternatives you've considered**
Vault helm chart supports annotations seccomp.security.alpha.kubernetes.io/defaultProfileName and apparmor.security.beta.kubernetes.io/defaultProfileName.
But these options are still in beta comparted to securityContext.seccompProfile which is GAed from Kubernetes v1.19

Contributor guide

Open the contributing guide

Research direction

Start with values.yaml and trace how the Vault Helm chart exposes pod security settings. Make securityContext.seccompProfile configurable with the requested RuntimeDefault example, then verify that the rendered chart passes the setting through to Kubernetes. No specific test file is mentioned in the issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes, yaml
Domain
devops, infrastructure
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.