Feat support security fsgroup (#1613)

* feat: support security context fsgroup Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com> * test: add unit test to security group fsgroup Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com> * test: add functional test to security group fsgroup Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com> * docs: add documentation of the new label of security group fsgroup Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com> --------- Signed-off-by: AhmedGrati <ahmedgrati1999@gmail.com>
2023-04-05 14:11:10 -04:00
parent ce1294a604
commit 8f0a6684ca
11 changed files with 237 additions and 0 deletions
@@ -201,6 +201,7 @@ The currently supported options are:
 | kompose.service.healthcheck.liveness.http_get_port  | kubernetes liveness httpGet port                                                     |
 | kompose.service.healthcheck.liveness.tcp_port       | kubernetes liveness tcpSocket port                                                   |
 | kompose.service.external-traffic-policy       | 'cluster', 'local', ''                                                   |                                                |
+| kompose.security-context.fsgroup       |  kubernetes pod security group fsgroup                                                  |                                                |

 **Note**: `kompose.service.type` label should be defined with `ports` only (except for headless service), otherwise `kompose` will fail.

@@ -431,6 +432,20 @@ services:
      kompose.service.external-traffic-policy: local
      kompose.service.type: loadbalancer
 ```
+
+- `kompose.security-context.fsgroup` defines Kubernetes Pod [security context FsGroup.](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/).
+
+For example:
+
+```yaml
+version: '3.8'
+
+services:
+  pgadmin:
+    image: nginx
+    labels:
+      kompose.security-context.fsgroup: 1001
+```
 ## Restart

 If you want to create normal pods without controller you can use `restart` construct of docker-compose to define that. Follow table below to see what happens on the `restart` value.