Skip to content

Add SecurityContext configuration for Cleanup Job #2187

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TylerHelmuth merged 1 commit into from
May 7, 2026
Merged

Add SecurityContext configuration for Cleanup Job #2187

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v2
name: opentelemetry-kube-stack
version: 0.14.12
version: 0.14.13
description: |
OpenTelemetry Quickstart chart for Kubernetes.
Installs an operator and collector for an easy way to get started with Kubernetes observability.
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: OpAMPBridge
metadata:
name: example
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ kind: Instrumentation
metadata:
name: example
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...telemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion ...emetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...ntelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion .../opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
6 changes: 3 additions & 3 deletions ...ntelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: agent
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down Expand Up @@ -232,7 +232,7 @@ metadata:
name: gateway
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down Expand Up @@ -365,7 +365,7 @@ metadata:
name: ingress
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion .../opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
4 changes: 2 additions & 2 deletions ...ts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-cluster-stats
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down Expand Up @@ -173,7 +173,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...ube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-apiserver
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...be-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
labels:
app: opentelemetry-kube-stack-kube-controller-manager
jobLabel: kube-controller-manager
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...k/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-kube-controller-manager
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...pentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
labels:
app: opentelemetry-kube-stack-kube-dns
jobLabel: kube-dns
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...metry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-kube-dns
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...entelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
labels:
app: opentelemetry-kube-stack-kube-etcd
jobLabel: kube-etcd
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...etry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-kube-etcd
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...ntelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
labels:
app: opentelemetry-kube-stack-kube-proxy
jobLabel: kube-proxy
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...try-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-kube-proxy
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...emetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
labels:
app: opentelemetry-kube-stack-kube-scheduler
jobLabel: kube-scheduler
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion ...kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ metadata:
namespace: default
labels:
app: opentelemetry-kube-stack-kube-scheduler
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ metadata:
name: example-daemon
namespace: default
labels:
helm.sh/chart: opentelemetry-kube-stack-0.14.11
helm.sh/chart: opentelemetry-kube-stack-0.14.13
app.kubernetes.io/version: "0.144.0"
app.kubernetes.io/managed-by: Helm
release: "example"
Expand Down
2 changes: 1 addition & 1 deletion charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,4 +61,4 @@ spec:
- "delete"
- "instrumentations,opampbridges,opentelemetrycollectors"
- "-l"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.11"
- "helm.sh/chart=opentelemetry-kube-stack-0.14.13"
8 changes: 8 additions & 0 deletions charts/opentelemetry-kube-stack/templates/hooks.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,12 +62,20 @@ spec:
{{- else}}
serviceAccountName: {{ .Values.cleanupJob.existingServiceAccount }}
{{- end}}
{{- with .Values.cleanupJob.podSecurityContext }}
securityContext:
{{- toYaml . | nindent 8 }}
{{- end }}
containers:
- name: delete-resources
{{- if $.Values.cleanupJob.image.digest }}
image: "{{ $.Values.cleanupJob.image.repository }}@{{ $.Values.cleanupJob.image.digest }}"
{{- else }}
image: "{{ $.Values.cleanupJob.image.repository }}:{{ $.Values.cleanupJob.image.tag }}"
{{- end }}
{{- with $.Values.cleanupJob.securityContext }}
securityContext:
{{- toYaml . | nindent 10 }}
{{- end }}
args:
- "delete"
Expand Down
23 changes: 23 additions & 0 deletions charts/opentelemetry-kube-stack/values.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4224,6 +4224,29 @@
"properties": {
"enabled": {
"type": "boolean"
},
"image": {
"type": "object",
"properties": {
"repository": {
"type": "string"
},
"tag": {
"type": "string"
},
"digest": {
"type": "string"
}
}
},
"existingServiceAccount": {
"type": "string"
},
"podSecurityContext": {
"$ref": "#/$defs/PodSecurityContext"
},
"securityContext": {
"$ref": "#/$defs/SecurityContext"
}
}
},
Expand Down
16 changes: 16 additions & 0 deletions charts/opentelemetry-kube-stack/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,22 @@ cleanupJob:
# To use the existingServiceAccount
existingServiceAccount: ""

# Pod-level securityContext for the cleanup Job (Pod spec field name; PSA restricted needs seccomp).
podSecurityContext: {}
# runAsNonRoot: true
# seccompProfile:
# type: RuntimeDefault

# Container security context for the cleanup Job.
securityContext: {}
# allowPrivilegeEscalation: false
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 65534

# Should the CRDs be installed by this chart.
crds:
# Control whether the opentelemetry.io CRDS should be installed.
Expand Down
Loading