Merge pull request #24 from archway-network/hermes-v1.10.3-update

feat(hermes): add complete security context and update hermes to v1.10.3
archway-network · Oct 7, 2024 · 17a23ba · 17a23ba
2 parents 438581d + 13c7f4b
commit 17a23ba
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 4 deletions.
diff --git a/charts/hermes-relayer/Chart.yaml b/charts/hermes-relayer/Chart.yaml
@@ -3,5 +3,5 @@ apiVersion: v2
 name: hermes-relayer
 description: A Helm chart for Kubernetes
 type: application
-version: 1.5.0
+version: 1.5.1
 appVersion: 1.10.3
diff --git a/charts/hermes-relayer/templates/clientUpdateCronJob.yaml b/charts/hermes-relayer/templates/clientUpdateCronJob.yaml
@@ -56,6 +56,10 @@ spec:
                 - name: chain1mnenomic
                   readOnly: true
                   mountPath: /etc/mnemonic
+              {{- with .Values.containerSecurityContext }}
+              securityContext:
+                {{- toYaml . | nindent 16 }}
+              {{- end }}
             - name: init-chain-2
               image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"
               args: [
@@ -74,6 +78,10 @@ spec:
                 - name: chain2mnenomic
                   readOnly: true
                   mountPath: /etc/mnemonic
+              {{- with .Values.containerSecurityContext }}
+              securityContext:
+                {{- toYaml . | nindent 16 }}
+              {{- end }}
           containers:
             - name: update-client-chain-1
               image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"

diff --git a/charts/hermes-relayer/templates/deployment.yaml b/charts/hermes-relayer/templates/deployment.yaml
@@ -8,9 +8,6 @@ metadata:
     {{- include "hermes-relayer.labels" . | nindent 4}}
 spec:
   replicas: {{.Values.replicaCount}}
-  securityContext:
-    runAsUser: 2000
-    runAsGroup: 2000
   selector:
     matchLabels:
       {{- include "hermes-relayer.selectorLabels" . | nindent 6 }}
@@ -62,6 +59,10 @@ spec:
             - name: chain1mnenomic
               readOnly: true
               mountPath: /etc/mnemonic
+          {{- with .Values.containerSecurityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
         - name: init-chain-2
           image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"
           args: [
@@ -80,6 +81,10 @@ spec:
             - name: chain2mnenomic
               readOnly: true
               mountPath: /etc/mnemonic
+          {{- with .Values.containerSecurityContext }}
+          securityContext:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
       containers:
         - name: relayer 
           image: "{{.Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion}}"