added support for opa and init

Author: swjungade

charts/platform-service/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v1
 appVersion: "1.1"
 description: Platform service chart
 name: platform-service
-version: 1.5.9
+version: 1.5.10

charts/platform-service/templates/deployment.yaml

@@ -91,6 +91,10 @@ spec:
         - name: {{ .name }}
           image: {{ .image.full }}
           imagePullPolicy: {{ .image.pullPolicy }}
+{{- if .initContainerSecurityContext }}
+          securityContext:
+            {{- toYaml .initContainerSecurityContext | nindent 12 }}
+{{- end }}
 {{- if .envVariables }}
           env:
 {{- with .envVariables }}

charts/platform-service/values.yaml

@@ -89,7 +89,18 @@ opa:
   # set to true to enable opa.  requires config in a config map called opa-istio-config and policy in a config map called opa-policy
   enabled: false
   image: openpolicyagent/opa:0.28.0-istio
-
+  containerSecurityContext: {}
+  # containerSecurityContext:
+  #   allowPrivilegeEscalation: false
+  #   readOnlyRootFilesystem: true
+  #   runAsNonRoot: true
+  #   privileged: false
+  #   runAsUser: 1001
+  #   runAsGroup: 1001
+  #   fsGroup: 1001
+  #   capabilities:
+  #     drop:
+  #       - ALL
 hpa:
   enabled: false
   maxReplicas: 3
@@ -356,7 +367,12 @@ initContainers: []
   #     requests:
   #       cpu: "500m"
   #       memory: "256Mi"
-
+  #  initContainerSecurityContext: {}
+  #    capabilities:
+  #      drop:
+  #      - ALL
+  #    readOnlyRootFilesystem: true
+  #    runAsNonRoot: true
 # Advanced: Raw YAML for additional init containers requiring full control
 initContainersDefinitions: []