Skip to content

[release-0.16] Add podSecurityContext and containerSecurityContext to KueueViz Helm …#9319

Merged
k8s-ci-robot merged 2 commits intokubernetes-sigs:release-0.16from
k8s-infra-cherrypick-robot:cherry-pick-9311-to-release-0.16
Feb 17, 2026
Merged

[release-0.16] Add podSecurityContext and containerSecurityContext to KueueViz Helm …#9319
k8s-ci-robot merged 2 commits intokubernetes-sigs:release-0.16from
k8s-infra-cherrypick-robot:cherry-pick-9311-to-release-0.16

Conversation

@k8s-infra-cherrypick-robot
Copy link
Contributor

@k8s-infra-cherrypick-robot k8s-infra-cherrypick-robot commented Feb 17, 2026

This is an automated cherry-pick of #9311

/assign mimowo

KueueViz Helm: Add podSecurityContext and containerSecurityContext configuration options to KueueViz Helm chart for restricted pod security profile compliance

…chart

This change adds configurable security contexts for KueueViz backend and
frontend deployments, enabling users to run KueueViz in clusters with
restricted pod security profiles.

The implementation mirrors the existing controller manager security
context configuration with secure defaults:
- runAsNonRoot: true
- seccompProfile.type: RuntimeDefault
- readOnlyRootFilesystem: true
- allowPrivilegeEscalation: false
- capabilities.drop: ALL
…chart

This change adds configurable security contexts for KueueViz backend and
frontend deployments, enabling users to run KueueViz in clusters with
restricted pod security profiles.

The implementation mirrors the existing controller manager security
context configuration with secure defaults:
- runAsNonRoot: true
- seccompProfile.type: RuntimeDefault
- readOnlyRootFilesystem: true
- allowPrivilegeEscalation: false
- capabilities.drop: ALL
@k8s-ci-robot k8s-ci-robot added this to the v0.16 milestone Feb 17, 2026
@k8s-ci-robot k8s-ci-robot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Feb 17, 2026
@k8s-ci-robot k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Feb 17, 2026
@netlify
Copy link

netlify bot commented Feb 17, 2026

Deploy Preview for kubernetes-sigs-kueue ready!

Name Link
🔨 Latest commit 881a6e7
🔍 Latest deploy log https://app.netlify.com/projects/kubernetes-sigs-kueue/deploys/69947a6cfad1650008948fa7
😎 Deploy Preview https://deploy-preview-9319--kubernetes-sigs-kueue.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link
Member

@tenzen-y tenzen-y left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Feb 17, 2026
@k8s-ci-robot
Copy link
Contributor

LGTM label has been added.

DetailsGit tree hash: 1310872501b711f2de703480d0610d5c8a17e0a9

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: k8s-infra-cherrypick-robot, tenzen-y

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 17, 2026
@tenzen-y
Copy link
Member

/kind feature

@k8s-ci-robot k8s-ci-robot added the kind/feature Categorizes issue or PR as related to a new feature. label Feb 17, 2026
@tenzen-y
Copy link
Member

/releae-note-edit

KueueViz Helm: Add podSecurityContext and containerSecurityContext configuration options to KueueViz Helm chart for restricted pod security profile compliance

@tenzen-y
Copy link
Member

/release-note-edit

KueueViz Helm: Add podSecurityContext and containerSecurityContext configuration options to KueueViz Helm chart for restricted pod security profile compliance

@k8s-ci-robot k8s-ci-robot merged commit 524b6ca into kubernetes-sigs:release-0.16 Feb 17, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/feature Categorizes issue or PR as related to a new feature. lgtm "Looks good to me", indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants