mirror of
https://github.com/YuzuZensai/netbird-kubernetes-operator.git
synced 2026-09-13 10:49:15 +00:00
JanandGitHub
cbe0e3a2a1
Introduced a new optional boolean field `Privileged` in the `NBRoutingPeerSpec` to allow deployments to specify if containers should run in privileged mode. Updated the CRD, Helm templates, and controller logic to support this feature. A new function `buildSecurityContext` was added to handle the creation of the appropriate security context based on the `Privileged` setting. Tests were updated to cover scenarios where privileged mode is enabled, disabled, or unspecified. This change allows more granular control over container security settings, potentially increasing compatibility with certain workloads that require elevated privileges. see https://github.com/netbirdio/kubernetes-operator/issues/90 **Note:** I am not a Go developer and have no experience with this architecture. I may have overlooked some things.
60 lines
1.1 KiB
YAML
60 lines
1.1 KiB
YAML
cluster:
|
|
name: "kubernetes"
|
|
dns: "svc.cluster.local"
|
|
|
|
# Create router per namespace, useful for strict networking requirements
|
|
namespacedNetworks: false
|
|
|
|
router:
|
|
# Deploy routing peer(s)
|
|
enabled: false
|
|
# replicas: 3
|
|
# resources:
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
# labels: {}
|
|
# annotations: {}
|
|
# nodeSelector: {}
|
|
# tolerations: []
|
|
# privileged: false
|
|
# Only needed if namespacedNetworks is set to true
|
|
namespaces: {}
|
|
# default:
|
|
# replicas: 3
|
|
# resources:
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 100Mi
|
|
# labels: {}
|
|
# annotations: {}
|
|
# nodeSelector: {}
|
|
# tolerations: []
|
|
# privileged: false
|
|
# NetBird Policies for use with exposed services
|
|
policies: {}
|
|
# default:
|
|
# name: Kubernetes Default Policy
|
|
# sourceGroups:
|
|
# - All
|
|
|
|
kubernetesAPI:
|
|
enabled: false
|
|
groups: []
|
|
# - group1
|
|
# - group2
|
|
policies: []
|
|
# - default
|
|
# resourceName: "my-cluster-kubernetes"
|
|
|
|
serviceAccount:
|
|
create: true
|
|
name: ""
|
|
annotations: {}
|