Add securityContexts in dagProcessor.logGroomerSidecar (apache#34499)

--------- Co-authored-by: Elad Kalif <[email protected]>
astronomer · Nov 29, 2023 · 92cc2ff · 92cc2ff
1 parent 6393b35
commit 92cc2ff
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/chart/templates/dag-processor/dag-processor-deployment.yaml b/chart/templates/dag-processor/dag-processor-deployment.yaml
@@ -29,6 +29,7 @@
 {{- $revisionHistoryLimit := or .Values.dagProcessor.revisionHistoryLimit .Values.revisionHistoryLimit }}
 {{- $securityContext := include "airflowPodSecurityContext" (list . .Values.dagProcessor) }}
 {{- $containerSecurityContext := include "containerSecurityContext" (list . .Values.dagProcessor) }}
+{{- $containerSecurityContextLogGroomerSidecar := include "containerSecurityContext" (list . .Values.dagProcessor.logGroomerSidecar) }}
 {{- $containerSecurityContextWaitForMigrations := include "containerSecurityContext" (list . .Values.dagProcessor.waitForMigrations) }}
 {{- $containerLifecycleHooks := or .Values.dagProcessor.containerLifecycleHooks .Values.containerLifecycleHooks }}
 apiVersion: apps/v1
@@ -198,6 +199,7 @@ spec:
           resources: {{- toYaml .Values.dagProcessor.logGroomerSidecar.resources | nindent 12 }}
           image: {{ template "airflow_image" . }}
           imagePullPolicy: {{ .Values.images.airflow.pullPolicy }}
+          securityContext: {{ $containerSecurityContextLogGroomerSidecar | nindent 12 }}
           {{- if .Values.dagProcessor.logGroomerSidecar.command }}
           command: {{ tpl (toYaml .Values.dagProcessor.logGroomerSidecar.command) . | nindent 12 }}
           {{- end }}

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -1666,6 +1666,8 @@ dagProcessor:
     #  requests:
     #   cpu: 100m
     #   memory: 128Mi
+    securityContexts:
+      container: {}
 
   waitForMigrations:
     # Whether to create init container to wait for db migrations

diff --git a/helm_tests/security/test_security_context.py b/helm_tests/security/test_security_context.py
@@ -322,10 +322,12 @@ def test_log_groomer_sidecar_container_setting(self):
             values={
                 "scheduler": {**spec},
                 "workers": {**spec},
+                "dagProcessor": {**spec},
             },
             show_only=[
                 "templates/scheduler/scheduler-deployment.yaml",
                 "templates/workers/worker-deployment.yaml",
+                "templates/dag-processor/dag-processor-deployment.yaml",
             ],
         )