charts icon indicating copy to clipboard operation
charts copied to clipboard

[bitnami/postgresql-ha] Fix pgpool deployment init container security context

Open Stevenpc3 opened this issue 1 year ago • 4 comments

Description of the change

Fix pgpool deployment init container security context

Benefits

Can properly use TLS for pgpool

Additional information

Current issue is when you enable pgpool.tls.enabled=true it will change securityContext for the init-chmod-container and it injects an extra enabled: true that is not part of the kubernetes api for securityContext https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.31/#securitycontext-v1-core. In the mildest case this will cause a warning. In other cases during enforcement, it prevents deployment.

{F2A3B8D1-476E-4A20-8F26-67E6E0B4D2B1}

{13EFDAC7-E689-48D0-81EB-5AF8CA84AC0E}

Checklist

  • [X] Chart version bumped in Chart.yaml according to semver. This is not necessary when the changes only affect README.md files.
  • [X] Title of the pull request follows this pattern [bitnami/<name_of_the_chart>] Descriptive title
  • [X] All commits signed off and in agreement of Developer Certificate of Origin (DCO)

Stevenpc3 avatar Oct 09 '24 19:10 Stevenpc3

Thanks for your contribution! Could you please bump the chart version in the Chart.yaml? This is necessary to test the changes and cut a new release.

In the same way, please ensure your fork is up-to-date with the parent repository.

carrodher avatar Oct 09 '24 20:10 carrodher

yeah sorry.. I added the commit in codespaces, but not sure why it didn't take. Will update.

And the fork was off of main as of an hour ago. Is it behind?

Stevenpc3 avatar Oct 09 '24 20:10 Stevenpc3

Absolutely.

Stevenpc3 avatar Oct 10 '24 11:10 Stevenpc3

added

Stevenpc3 avatar Oct 10 '24 16:10 Stevenpc3

bump

Stevenpc3 avatar Oct 23 '24 11:10 Stevenpc3