mirror of
https://github.com/YuzuZensai/netbird-kubernetes-operator.git
synced 2026-09-13 18:59:09 +00:00
JanandGitHub
cbe0e3a2a1
Introduced a new optional boolean field `Privileged` in the `NBRoutingPeerSpec` to allow deployments to specify if containers should run in privileged mode. Updated the CRD, Helm templates, and controller logic to support this feature. A new function `buildSecurityContext` was added to handle the creation of the appropriate security context based on the `Privileged` setting. Tests were updated to cover scenarios where privileged mode is enabled, disabled, or unspecified. This change allows more granular control over container security settings, potentially increasing compatibility with certain workloads that require elevated privileges. see https://github.com/netbirdio/kubernetes-operator/issues/90 **Note:** I am not a Go developer and have no experience with this architecture. I may have overlooked some things.
90 lines
2.3 KiB
YAML
90 lines
2.3 KiB
YAML
{{- if .Values.router.enabled }}
|
|
{{- if .Values.namespacedNetworks }}
|
|
{{ $defaults := .Values.router }}
|
|
{{ range $k, $v := .Values.router.namespaces }}
|
|
apiVersion: netbird.io/v1
|
|
kind: NBRoutingPeer
|
|
metadata:
|
|
finalizers:
|
|
- netbird.io/cleanup
|
|
labels:
|
|
app.kubernetes.io/component: operator
|
|
{{- include "netbird-operator-config.labels" $ | nindent 4 }}
|
|
name: router
|
|
namespace: {{ $k }}
|
|
{{ $spec := merge $defaults $v }}
|
|
{{- if or (or (or $spec.replicas $spec.resources) (or $spec.labels $spec.annotations)) (or (or $spec.nodeSelector $spec.tolerations) $spec.privileged) }}
|
|
spec:
|
|
{{- if $spec.replicas }}
|
|
replicas: {{ $spec.replicas }}
|
|
{{- end }}
|
|
{{- if $spec.resources }}
|
|
resources:
|
|
{{- toYaml $spec.resources | nindent 4 }}
|
|
{{- end }}
|
|
{{- if $spec.labels }}
|
|
labels:
|
|
{{- toYaml $spec.labels | nindent 4 }}
|
|
{{- end }}
|
|
{{- if $spec.annotations }}
|
|
annotations:
|
|
{{- toYaml $spec.annotations | nindent 4 }}
|
|
{{- end }}
|
|
{{- if $spec.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml $spec.nodeSelector | nindent 4 }}
|
|
{{- end }}
|
|
{{- if $spec.tolerations }}
|
|
tolerations:
|
|
{{- toYaml $spec.tolerations | nindent 4 }}
|
|
{{- end }}
|
|
{{- if $spec.privileged }}
|
|
privileged: {{ $spec.privileged }}
|
|
{{- end }}
|
|
{{- end }}
|
|
---
|
|
{{- end }}
|
|
{{- else }}
|
|
{{- with .Values.router }}
|
|
apiVersion: netbird.io/v1
|
|
kind: NBRoutingPeer
|
|
metadata:
|
|
finalizers:
|
|
- netbird.io/cleanup
|
|
labels:
|
|
app.kubernetes.io/component: operator
|
|
{{- include "netbird-operator-config.labels" $ | nindent 4 }}
|
|
name: router
|
|
{{- if or (or (or .replicas .resources) (or .labels .annotations)) (or (or .nodeSelector .tolerations) .privileged) }}
|
|
spec:
|
|
{{- if .replicas }}
|
|
replicas: {{ .replicas }}
|
|
{{- end }}
|
|
{{- if .resources }}
|
|
resources:
|
|
{{- toYaml .resources | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .labels }}
|
|
labels:
|
|
{{- toYaml .labels | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .annotations }}
|
|
annotations:
|
|
{{- toYaml .annotations | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml .nodeSelector | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .tolerations }}
|
|
tolerations:
|
|
{{- toYaml .tolerations | nindent 4 }}
|
|
{{- end }}
|
|
{{- if .privileged }}
|
|
privileged: {{ .privileged }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|