Split attribute securityContext in podSecurityContext and containerSe…

…curityContext
tsuru · Jan 22, 2024 · 62a4456 · 62a4456
1 parent cfbf014
commit 62a4456
Show file tree

Hide file tree

Showing 5 changed files with 393 additions and 161 deletions.
diff --git a/api/v1alpha1/nginx_types.go b/api/v1alpha1/nginx_types.go
@@ -196,9 +196,14 @@ type NginxPodTemplateSpec struct {
 	// terminationGracePeriodSeconds default value.
 	// +optional
 	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`
-	// SecurityContext configures security attributes for the nginx pod.
+	// PodSecurityContext configures security attributes for the nginx pod.
 	// +optional
-	SecurityContext *corev1.SecurityContext `json:"securityContext,omitempty"`
+	PodSecurityContext *corev1.PodSecurityContext `json:"podSecurityContext,omitempty"`
+
+	// ContainerSecurityContext configures security attributes for the nginx container.
+	// +optional
+	ContainerSecurityContext *corev1.SecurityContext `json:"containerSecurityContext,omitempty"`
+
 	// Volumes that will attach to nginx instances
 	// +optional
 	Volumes []corev1.Volume `json:"volumes,omitempty"`

diff --git a/api/v1alpha1/zz_generated.deepcopy.go b/api/v1alpha1/zz_generated.deepcopy.go