[stable/graylog] Allow to run as privileged

Signed-off-by: Chris Barton <chris.barton@recurly.com>
helm · Mar 16, 2020 · c1e165c · c1e165c
1 parent 33fcf04
commit c1e165c
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/stable/graylog/README.md b/stable/graylog/README.md
@@ -109,6 +109,7 @@ The following table lists the configurable parameters of the Graylog chart and t
 | `graylog.tolerations`                   | Graylog server tolerations                                                                                                                            | `[]`                                  |
 | `graylog.nodeSelector`                  | Graylog server node selector                                                                                                                          | `{}`                                  |
 | `graylog.env`                           | Graylog server env variables                                                                                                                          | `{}`                                  |
+| `graylog.privileged`                    | Run as a privileged container                                                                                                        | `false`                                                |
 | `graylog.additionalJavaOpts`            | Graylog service additional `JAVA_OPTS`                                                                                                                | ``                                    |
 | `graylog.service.type`                  | Kubernetes Service type                                                                                                                               | `ClusterIP`                           |
 | `graylog.service.port`                  | Graylog Service port                                                                                                                                  | `9000`                                |

diff --git a/stable/graylog/templates/statefulset.yaml b/stable/graylog/templates/statefulset.yaml
@@ -120,6 +120,8 @@ spec:
             - name: {{ $key }}
               value: {{ $value | quote }}
             {{- end }}
+          securityContext:
+            privileged: {{ .Values.graylog.privileged }}
           ports:
             - containerPort: 9000
               name: graylog

diff --git a/stable/graylog/values.yaml b/stable/graylog/values.yaml
@@ -55,6 +55,10 @@ graylog:
   ##
   env: {}
 
+  ## Run as privileged container
+  ##
+  privileged: false
+
   ## Pod affinity
   ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
   ##