Missing group configuration for securityContext
What is the issue
Add optional support to configure the group specific configuration runAsGroup
and supplementalGroups
for K8S deployments that have pod security policies that requires explicit configuration.
How to reproduce
Deploy the helm chart on a K8S instance that has PSP that requires explicit configuration
admission webhook "validation.gatekeeper.sh" denied the request: [denied by psp-pods-allowed-supplemental-groups-ranges] Container test-runner is attempting to run without a required securityContext/supplementalGroups
[denied by psp-pods-allowed-supplemental-groups-ranges] Container configure is attempting to run without a required securityContext/supplementalGroups
How to fix
Make runAsGroup
and supplementalGroups
as optional configurable