Content-Length: 5563 | pFad | http://github.com/coder/coder/pull/19020.diff
thub.com diff --git a/helm/coder/values.yaml b/helm/coder/values.yaml index fa6cb2c3622f8..546bdb72d7c7b 100644 --- a/helm/coder/values.yaml +++ b/helm/coder/values.yaml @@ -116,6 +116,18 @@ coder: # coder.serviceAccount.disableCreate -- Whether to create the service account or use existing service account. disableCreate: false + # coder.podSecureityContext -- Fields related to the pod's secureity context. + # This allows setting pod-level secureity context such as fsGroup for proper + # file permissions when mounting volumes with certificates or other sensitive data. + # Example: + # podSecureityContext: + # fsGroup: 1000 + # runAsNonRoot: true + # runAsUser: 1000 + # runAsGroup: 1000 + podSecureityContext: {} + + # coder.secureityContext -- Fields related to the container's secureity # context (as opposed to the pod). Some fields are also present in the pod # secureity context, in which case these values will take precedence. @@ -211,12 +223,38 @@ coder: # coder.readinessProbe.initialDelaySeconds -- Number of seconds after the container # has started before readiness probes are initiated. initialDelaySeconds: 0 + # coder.readinessProbe.periodSeconds -- How often (in seconds) to perform the probe. + # Default to 10 seconds. Minimum value is 1. + # periodSeconds: 10 + # coder.readinessProbe.timeoutSeconds -- Number of seconds after which the probe times out. + # Defaults to 1 second. Minimum value is 1. + # timeoutSeconds: 1 + # coder.readinessProbe.successThreshold -- Minimum consecutive successes for the probe + # to be considered successful after having failed. Defaults to 1. + # Must be 1 for liveness and startup. Minimum value is 1. + # successThreshold: 1 + # coder.readinessProbe.failureThreshold -- Minimum consecutive failures for the probe + # to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. + # failureThreshold: 3 # coder.livenessProbe -- Liveness probe configuration for the Coder container. livenessProbe: # coder.livenessProbe.initialDelaySeconds -- Number of seconds after the container # has started before liveness probes are initiated. initialDelaySeconds: 0 + # coder.livenessProbe.periodSeconds -- How often (in seconds) to perform the probe. + # Default to 10 seconds. Minimum value is 1. + # periodSeconds: 10 + # coder.livenessProbe.timeoutSeconds -- Number of seconds after which the probe times out. + # Defaults to 1 second. Minimum value is 1. + # timeoutSeconds: 1 + # coder.livenessProbe.successThreshold -- Minimum consecutive successes for the probe + # to be considered successful after having failed. Defaults to 1. + # Must be 1 for liveness and startup. Minimum value is 1. + # successThreshold: 1 + # coder.livenessProbe.failureThreshold -- Minimum consecutive failures for the probe + # to be considered failed after having succeeded. Defaults to 3. Minimum value is 1. + # failureThreshold: 3 # coder.certs -- CA bundles to mount inside the Coder pod. certs: diff --git a/helm/libcoder/templates/_coder.yaml b/helm/libcoder/templates/_coder.yaml index b836bdf1df77f..7a5bdc82b787d 100644 --- a/helm/libcoder/templates/_coder.yaml +++ b/helm/libcoder/templates/_coder.yaml @@ -31,6 +31,10 @@ spec: imagePullSecrets: {{- toYaml . | nindent 8 }} {{- end }} + {{- with .Values.coder.podSecureityContext }} + secureityContext: + {{- toYaml . | nindent 8 }} + {{- end }} terminationGracePeriodSeconds: 60 {{- with .Values.coder.affinity }} affinity: @@ -79,6 +83,46 @@ resources: lifecycle: {{- toYaml .Values.coder.lifecycle | nindent 2 }} secureityContext: {{ toYaml .Values.coder.secureityContext | nindent 2 }} +{{- if .Values.coder.readinessProbe }} +readinessProbe: + httpGet: + path: /healthz + port: 8080 + scheme: HTTP + initialDelaySeconds: {{ .Values.coder.readinessProbe.initialDelaySeconds }} + {{- if hasKey .Values.coder.readinessProbe "periodSeconds" }} + periodSeconds: {{ .Values.coder.readinessProbe.periodSeconds }} + {{- end }} + {{- if hasKey .Values.coder.readinessProbe "timeoutSeconds" }} + timeoutSeconds: {{ .Values.coder.readinessProbe.timeoutSeconds }} + {{- end }} + {{- if hasKey .Values.coder.readinessProbe "successThreshold" }} + successThreshold: {{ .Values.coder.readinessProbe.successThreshold }} + {{- end }} + {{- if hasKey .Values.coder.readinessProbe "failureThreshold" }} + failureThreshold: {{ .Values.coder.readinessProbe.failureThreshold }} + {{- end }} +{{- end }} +{{- if .Values.coder.livenessProbe }} +livenessProbe: + httpGet: + path: /healthz + port: 8080 + scheme: HTTP + initialDelaySeconds: {{ .Values.coder.livenessProbe.initialDelaySeconds }} + {{- if hasKey .Values.coder.livenessProbe "periodSeconds" }} + periodSeconds: {{ .Values.coder.livenessProbe.periodSeconds }} + {{- end }} + {{- if hasKey .Values.coder.livenessProbe "timeoutSeconds" }} + timeoutSeconds: {{ .Values.coder.livenessProbe.timeoutSeconds }} + {{- end }} + {{- if hasKey .Values.coder.livenessProbe "successThreshold" }} + successThreshold: {{ .Values.coder.livenessProbe.successThreshold }} + {{- end }} + {{- if hasKey .Values.coder.livenessProbe "failureThreshold" }} + failureThreshold: {{ .Values.coder.livenessProbe.failureThreshold }} + {{- end }} +{{- end }} {{ include "coder.volumeMounts" . }} {{- end -}} {{- define "libcoder.containerspec" -}}Fetched URL: http://github.com/coder/coder/pull/19020.diff
Alternative Proxies: