Remove certain parts of the pod security context

README.md

@@ -11,7 +11,7 @@ The Alloy Operator is a Kubernetes Operator that manages the lifecycle of
 
 | Component        | Version |
 |------------------|---------|
-| Alloy Operator   | 0.3.15 |
+| Alloy Operator   | 0.4.0 |
 | Alloy Helm chart | 1.5.1 |
 | Alloy binary     | v1.12.1 |
 

charts/alloy-operator/CHANGELOG.md

@@ -1,7 +1,13 @@
 # Changelog
 
+## 0.4.0
+
+* Remove some of the special pod security contexts, because their values may cause issues on certain platforms (@petewall)
+
 ## 0.3.15
 
+* Update Alloy to 1.5.1 (@petewall)
+
 ## 0.3.14
 
 * Update Alloy to 1.5.0 (@petewall)

charts/alloy-operator/Chart.yaml

@@ -6,7 +6,7 @@ icon: https://raw.githubusercontent.com/grafana/grafana/main/public/img/grafana_
 sources:
   - https://github.com/grafana/alloy-operator
 type: application
-version: 0.3.15
+version: 0.4.0
 appVersion: "1.5.1"
 maintainers:
   - email: pete.wall@grafana.com

charts/alloy-operator/README.md

@@ -5,7 +5,7 @@
 
 # alloy-operator
 
-![Version: 0.3.15](https://img.shields.io/badge/Version-0.3.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.1](https://img.shields.io/badge/AppVersion-1.5.1-informational?style=flat-square)
+![Version: 0.4.0](https://img.shields.io/badge/Version-0.4.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.5.1](https://img.shields.io/badge/AppVersion-1.5.1-informational?style=flat-square)
 
 A Helm chart the Alloy Operator, a project to innovate on creating instances of Grafana Alloy.
 
@@ -40,7 +40,7 @@ A Helm chart the Alloy Operator, a project to innovate on creating instances of
 | nodeSelector | object | `{"kubernetes.io/os":"linux"}` | Set the node selector for the Alloy Operator pods. |
 | podAnnotations | object | `{}` | Additional annotations to add to the Alloy Operator pods. |
 | podLabels | object | `{}` | Additional labels to add to the Alloy Operator pods. |
-| podSecurityContext | object | `{"fsGroup":1000,"runAsGroup":1000,"runAsNonRoot":true,"runAsUser":1000,"seccompProfile":{"type":"RuntimeDefault"}}` | Set the security context for the Alloy Operator pods. |
+| podSecurityContext | object | `{"runAsNonRoot":true}` | Set the security context for the Alloy Operator pods. |
 | priorityClassName | string | `""` | Sets the priority class name for the Alloy Operator pods. |
 | tolerations | list | `[]` | Set the tolerations for the Alloy Operator pods. |
 

charts/alloy-operator/docs/examples/default/output.yaml

@@ -6,7 +6,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -19,7 +19,7 @@ kind: ClusterRole
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -77,7 +77,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -97,7 +97,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -118,7 +118,7 @@ metadata:
   name: test-alloy-operator-leader-election-role
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -163,7 +163,7 @@ metadata:
   name: test-alloy-operator-leader-election-rolebinding
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -184,7 +184,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -211,7 +211,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -225,20 +225,15 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: alloy-operator-0.3.15
+        helm.sh/chart: alloy-operator-0.4.0
         app.kubernetes.io/name: alloy-operator
         app.kubernetes.io/instance: test
         app.kubernetes.io/version: "1.5.1"
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: test-alloy-operator
       securityContext:
-        fsGroup: 1000
-        runAsGroup: 1000
         runAsNonRoot: true
-        runAsUser: 1000
-        seccompProfile:
-          type: RuntimeDefault
       containers:
         - name: alloy-operator
           image: "ghcr.io/grafana/alloy-operator:1.5.1"

charts/alloy-operator/docs/examples/image-by-digest/output.yaml

@@ -6,7 +6,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -19,7 +19,7 @@ kind: ClusterRole
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -77,7 +77,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -97,7 +97,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -118,7 +118,7 @@ metadata:
   name: test-alloy-operator-leader-election-role
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -163,7 +163,7 @@ metadata:
   name: test-alloy-operator-leader-election-rolebinding
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -184,7 +184,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -211,7 +211,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -225,20 +225,15 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: alloy-operator-0.3.15
+        helm.sh/chart: alloy-operator-0.4.0
         app.kubernetes.io/name: alloy-operator
         app.kubernetes.io/instance: test
         app.kubernetes.io/version: "1.5.1"
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: test-alloy-operator
       securityContext:
-        fsGroup: 1000
-        runAsGroup: 1000
         runAsNonRoot: true
-        runAsUser: 1000
-        seccompProfile:
-          type: RuntimeDefault
       containers:
         - name: alloy-operator
           image: "ghcr.io/grafana/alloy-operator@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef"

charts/alloy-operator/docs/examples/namespaced/output.yaml

@@ -6,7 +6,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -19,7 +19,7 @@ kind: ClusterRole
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -77,7 +77,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator-alloy-manager
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -97,7 +97,7 @@ kind: ClusterRoleBinding
 metadata:
   name: test-alloy-operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -118,7 +118,7 @@ metadata:
   name: test-alloy-operator-leader-election-role
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -163,7 +163,7 @@ metadata:
   name: test-alloy-operator-leader-election-rolebinding
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -184,7 +184,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -211,7 +211,7 @@ metadata:
   name: test-alloy-operator
   namespace: operator
   labels:
-    helm.sh/chart: alloy-operator-0.3.15
+    helm.sh/chart: alloy-operator-0.4.0
     app.kubernetes.io/name: alloy-operator
     app.kubernetes.io/instance: test
     app.kubernetes.io/version: "1.5.1"
@@ -225,20 +225,15 @@ spec:
   template:
     metadata:
       labels:
-        helm.sh/chart: alloy-operator-0.3.15
+        helm.sh/chart: alloy-operator-0.4.0
         app.kubernetes.io/name: alloy-operator
         app.kubernetes.io/instance: test
         app.kubernetes.io/version: "1.5.1"
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: test-alloy-operator
       securityContext:
-        fsGroup: 1000
-        runAsGroup: 1000
         runAsNonRoot: true
-        runAsUser: 1000
-        seccompProfile:
-          type: RuntimeDefault
       containers:
         - name: alloy-operator
           image: "ghcr.io/grafana/alloy-operator:1.5.1"