Merge pull request #24 from archway-network/hermes-v1.10.3-update

feat(hermes): add complete security context and update hermes to v1.10.3
archway-network · Oct 7, 2024 · 17a23ba · 17a23ba
2 parents 438581d + 13c7f4b
commit 17a23ba
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 4 deletions.
diff --git a/charts/hermes-relayer/Chart.yaml b/charts/hermes-relayer/Chart.yaml
@@ -3,5 +3,5 @@ apiVersion: v2
 name: hermes-relayer
 description: A Helm chart for Kubernetes
 type: application
-version: 1.5.0
+version: 1.5.1
 appVersion: 1.10.3
diff --git a/charts/hermes-relayer/templates/clientUpdateCronJob.yaml b/charts/hermes-relayer/templates/clientUpdateCronJob.yaml
@@ -56,6 +56,10 @@ spec:
  - name: chain1mnenomic
  readOnly: true
  mountPath: /etc/mnemonic
+ {{- with .Values.containerSecurityContext }}
+ securityContext:
+ {{- toYaml . | nindent 16 }}
+ {{- end }}
  - name: init-chain-2
  image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"
  args: [
@@ -74,6 +78,10 @@ spec:
  - name: chain2mnenomic
  readOnly: true
  mountPath: /etc/mnemonic
+ {{- with .Values.containerSecurityContext }}
+ securityContext:
+ {{- toYaml . | nindent 16 }}
+ {{- end }}
  containers:
  - name: update-client-chain-1
  image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"

diff --git a/charts/hermes-relayer/templates/deployment.yaml b/charts/hermes-relayer/templates/deployment.yaml
@@ -8,9 +8,6 @@ metadata:
  {{- include "hermes-relayer.labels" . | nindent 4}}
 spec:
  replicas: {{.Values.replicaCount}}
- securityContext:
- runAsUser: 2000
- runAsGroup: 2000
  selector:
  matchLabels:
  {{- include "hermes-relayer.selectorLabels" . | nindent 6 }}
@@ -62,6 +59,10 @@ spec:
  - name: chain1mnenomic
  readOnly: true
  mountPath: /etc/mnemonic
+ {{- with .Values.containerSecurityContext }}
+ securityContext:
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
  - name: init-chain-2
  image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"
  args: [
@@ -80,6 +81,10 @@ spec:
  - name: chain2mnenomic
  readOnly: true
  mountPath: /etc/mnemonic
+ {{- with .Values.containerSecurityContext }}
+ securityContext:
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
  containers:
  - name: relayer 
  image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"