added support for security context

activemq-artemis/templates/master-statefulset.yaml

@@ -98,6 +98,10 @@ spec:
             port: core
           initialDelaySeconds: 10
           periodSeconds: 10
+        {{- if .Values.containerSecurityContext }}
+        securityContext:
+{{ toYaml .Values.containerSecurityContext | indent 10 }}
+        {{- end }}
         volumeMounts:
         - name: data
           mountPath: /var/lib/artemis/data
@@ -107,6 +111,10 @@ spec:
           mountPath: /opt/configure-common
         - name: configure-master
           mountPath: /opt/configure-master
+      {{- if .Values.podSecurityContext }}
+      securityContext:
+{{ toYaml .Values.podSecurityContext | indent 8 }}
+      {{- end }}
       volumes:
       - name: config-override
         emptyDir: {}
@@ -126,7 +134,7 @@ spec:
       resources:
         requests:
           storage: {{ .Values.persistence.size }}
-  {{- else}}
+{{- else }}
       - name: data
         emptyDir: {}
-  {{- end}}
+{{- end }}

activemq-artemis/templates/slave-statefulset.yaml

@@ -78,6 +78,10 @@ spec:
             port: core
           initialDelaySeconds: 10
           periodSeconds: 10
+        {{- if .Values.containerSecurityContext }}
+        securityContext:
+{{ toYaml .Values.containerSecurityContext | indent 10 }}
+        {{- end }}
         volumeMounts:
         - name: data
           mountPath: /var/lib/artemis/data
@@ -87,6 +91,10 @@ spec:
           mountPath: /opt/configure-common
         - name: configure-slave
           mountPath: /opt/configure-slave
+      {{- if .Values.podSecurityContext }}
+      securityContext:
+{{ toYaml .Values.podSecurityContext | indent 8 }}
+      {{- end }}
       volumes:
       - name: config-override
         emptyDir: {}
@@ -106,7 +114,7 @@ spec:
       resources:
         requests:
           storage: {{ .Values.persistence.size }}
-{{- else}}
+{{- else }}
       - name: data
         emptyDir: {}
 {{- end}}

activemq-artemis/values.yaml

@@ -72,6 +72,11 @@ resources:
 loadbalancer:
   enabled: true
 
+# podSecurityContext allows setting security context for the pod: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+# podSecurityContext:
+# containerSecurityContext allows setting security context for the container: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+# containerSecurityContext:
+
 ## Prometheus Exporters / Metrics
 ##
 prometheus: