Improvement: Ability to set SecurityContext

[OS-marcelopereira]

Improvement: Ability to set SecurityContext

Expected Behavior

I have a usecase where I need to set a SecurityContext block on the APIServer deployment, the apiserver container and componentResources, in order to comply with security requitements.

Looking at the documentation, I see that such a thing is not available for the APIServerDeploymentContainer, APIServerDeploymentContainer and APIServerDeploymentContainer

Is this something that might be possible in the future?

Calico version: v3.24.5

[caseydavenport]

Yep, looks like we hard-code a security context here: https://github.com/tigera/operator/blob/master/pkg/render/apiserver.go#L940

It should be possible to expose an option for this, although we need to be careful not to expose an option that can easily break user's clusters.

[clayvan]

tigera/operator#2720

[flo-mic]

is there any update on this?

[caseydavenport]

Just waiting on someone to pick up the torch for this one - I think it's generally agreed to be a good thing. Any takers?