How would one add a securityContext to a container...
# generalc
cool-egg-852
04/07/2020, 2:40 PMHow would one add a securityContext to a container as a transformation?
cool-egg-852
04/07/2020, 2:40 PM Copy code
transformations: [
(resource: any) => {
if (resource.metadata.name === 'kong-external-kong' && resource.kind === 'Deployment') {
resource.spec.template.spec.containers[0].securityContext = {
capabilities: {
drop: ['ALL'],
add: ['NET_BIND_SERVICE'],
},
allowPrivilegeEscalation: true,
};
}
},
],cool-egg-852
04/07/2020, 2:40 PMdoesn’t seem to work
cool-egg-852
04/07/2020, 2:40 PM Copy code
TSError: ⨯ Unable to compile TypeScript:
chart.ts(58,7): error TS2322: Type '(resource: any) => void' is not assignable to type 'ResourceTransformation'.
Type 'void' is not assignable to type 'ResourceTransformationResult'.
chart.ts(122,7): error TS2322: Type '(resource: any) => void' is not assignable to type 'ResourceTransformation'.
Type 'void' is not assignable to type 'ResourceTransformationResult'.c
clean-eve-27532
04/07/2020, 2:45 PMI think you have to return the resource
c
cool-egg-852
04/07/2020, 2:45 PMNone of their examples show returning anything
cool-egg-852
04/07/2020, 2:46 PMDid something change and none of their documentation got updated?
l
limited-rainbow-51650
04/07/2020, 2:47 PMA transformation is a function taking in
argsResourceTransformationResultundefined Copy code
type ResourceTransformation = (args: ResourceTransformationArgs) => ResourceTransformationResult | undefined;c
cool-egg-852
04/07/2020, 2:47 PMYeah, I think they changed this and didn’t follow semver
cool-egg-852
04/07/2020, 2:48 PMcool-egg-852
04/07/2020, 2:48 PMThere is no returns there
cool-egg-852
04/07/2020, 2:48 PMThis is how it always was.
cool-egg-852
04/07/2020, 2:48 PMaah, you know what, I’m getting confused by helm transformations and resource transformations.
cool-egg-852
04/07/2020, 2:49 PMUnfortunately they are 2 completely different concepts
b
busy-umbrella-36067
04/07/2020, 2:49 PMwhere are you specifying transformatinos
l
limited-rainbow-51650
04/07/2020, 2:49 PMWell, they are in the middle of preparing their 2.0 release and need to update code and documentation for core and all the providers.
b
busy-umbrella-36067
04/07/2020, 2:49 PMsignature for the helm one is void return
busy-umbrella-36067
04/07/2020, 2:50 PMc
cool-egg-852
04/07/2020, 2:50 PMYeah, it’s a bit confusing that there are 2 different transformations, one for helm and one for everything else.
12 Views