From c5b5ab28159c31a2bc267194e6e3e9b94aca9d64 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Frimberger?= <andre@intellisoft.de>
Date: Thu, 9 May 2024 10:27:14 +0200
Subject: [PATCH] feat(chart:k8up) add security context for cleanup hook

---
 charts/k8up/Chart.yaml                  | 2 +-
 charts/k8up/README.md                   | 4 ++--
 charts/k8up/templates/cleanup-hook.yaml | 4 ++++
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/charts/k8up/Chart.yaml b/charts/k8up/Chart.yaml
index a1e65bb58..98fea299f 100644
--- a/charts/k8up/Chart.yaml
+++ b/charts/k8up/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
   - backup
   - operator
   - restic
-version: 4.6.0
+version: 4.7.0
 sources:
   - https://github.com/k8up-io/k8up
 maintainers:
diff --git a/charts/k8up/README.md b/charts/k8up/README.md
index 5a3706e3d..37f71ac1c 100644
--- a/charts/k8up/README.md
+++ b/charts/k8up/README.md
@@ -1,6 +1,6 @@
 # k8up
 
-![Version: 4.6.0](https://img.shields.io/badge/Version-4.6.0-informational?style=flat-square)
+![Version: 4.7.0](https://img.shields.io/badge/Version-4.7.0-informational?style=flat-square)
 
 Kubernetes and OpenShift Backup Operator based on restic
 
@@ -13,7 +13,7 @@ helm repo add k8up-io https://k8up-io.github.io/k8up
 helm install k8up k8up-io/k8up
 ```
 ```bash
-kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.6.0/k8up-crd.yaml
+kubectl apply -f https://github.com/k8up-io/k8up/releases/download/k8up-4.7.0/k8up-crd.yaml
 ```
 
 <!---
diff --git a/charts/k8up/templates/cleanup-hook.yaml b/charts/k8up/templates/cleanup-hook.yaml
index 7133feb4e..3d752843a 100644
--- a/charts/k8up/templates/cleanup-hook.yaml
+++ b/charts/k8up/templates/cleanup-hook.yaml
@@ -81,6 +81,8 @@ spec:
     spec:
       restartPolicy: Never
       serviceAccountName: cleanup-service-account
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:
       - name: "{{ .Release.Name }}-cleanup"
         image: "{{ include "cleanupImage" . }}"
@@ -99,3 +101,5 @@ spec:
               kubectl -n "$ns" delete rolebinding pod-executor-namespaced --ignore-not-found=true
               kubectl -n "$ns" delete role pod-executor --ignore-not-found=true
             done
+        securityContext:
+          {{- toYaml .Values.securityContext | nindent 12 }}