)]}'
{"helm-toolkit/templates/snippets/_kubernetes_pod_security_context.tpl":[{"author":{"_account_id":28701,"name":"Dustin Specker","email":"v-dspecker@microsoft.com","username":"dustinspecker"},"change_message_id":"384dfb62073cc3db875c127f8a7ea496d91ed0b2","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"3f79a3b5_d458b126","updated":"2018-10-30 18:26:19.000000000","message":"nitpick/question: does it make sense to include pod in the template name since this can be used for both pod and container specs?","commit_id":"8cb5dbc6b91a026b1751f214ef7965f56bd22a6c"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"d013b1c41c37be44cba846d5fee9705f06514d8c","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"3f79a3b5_f5ba80b8","in_reply_to":"3f79a3b5_d458b126","updated":"2018-10-31 07:02:25.000000000","message":"There is a slight difference between the fields available in a securityContext and a podSecurityContext - e.g. fsGroup.  So we could technically fuse them together, I will keep them separate for now.","commit_id":"8cb5dbc6b91a026b1751f214ef7965f56bd22a6c"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"bd4d66e52bc14b88955f3b984e2acec14fadee67","unresolved":false,"context_lines":[{"line_number":24,"context_line":"usage: |"},{"line_number":25,"context_line":"  {{ dict \"envAll\" . \"application\" \"myApp\" | include \"helm-toolkit.snippets.kubernetes_pod_security_context\" }}"},{"line_number":26,"context_line":"return: |"},{"line_number":27,"context_line":"  securityContext:"},{"line_number":28,"context_line":"    runAsUser: 34356"},{"line_number":29,"context_line":"*/}}"},{"line_number":30,"context_line":""}],"source_content_type":"text/x-smarty","patch_set":3,"id":"3f79a3b5_44e2da03","line":27,"range":{"start_line":27,"start_character":0,"end_line":27,"end_character":18},"updated":"2018-11-09 21:32:25.000000000","message":"are there other things we would want to specifiy about the security context? how can these be articulated?","commit_id":"5a32328edf6a5df4a6fc048d2b3c5cd63915ebb7"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"cca5a36b0661402fb7d9653e0c6dc4fbce9fc1da","unresolved":false,"context_lines":[{"line_number":24,"context_line":"usage: |"},{"line_number":25,"context_line":"  {{ dict \"envAll\" . \"application\" \"myApp\" | include \"helm-toolkit.snippets.kubernetes_pod_security_context\" }}"},{"line_number":26,"context_line":"return: |"},{"line_number":27,"context_line":"  securityContext:"},{"line_number":28,"context_line":"    runAsUser: 34356"},{"line_number":29,"context_line":"*/}}"},{"line_number":30,"context_line":""}],"source_content_type":"text/x-smarty","patch_set":3,"id":"3f79a3b5_ca96f3a0","line":27,"range":{"start_line":27,"start_character":0,"end_line":27,"end_character":18},"in_reply_to":"3f79a3b5_04bdc2b0","updated":"2018-11-10 00:44:34.000000000","message":"we can do that - though we can leave runAsUser as is so it can take use of the uid that\u0027s there. I will add a toYaml section to cope with other things we want to specify about security context - unless you want to wholesale take care of the securityContext?","commit_id":"5a32328edf6a5df4a6fc048d2b3c5cd63915ebb7"},{"author":{"_account_id":17591,"name":"Steve Wilkerson","email":"wilkers.steve@gmail.com","username":"srwilkers"},"change_message_id":"f38eeaa04844b3690912cd5b59cb12e66863cb1e","unresolved":false,"context_lines":[{"line_number":24,"context_line":"usage: |"},{"line_number":25,"context_line":"  {{ dict \"envAll\" . \"application\" \"myApp\" | include \"helm-toolkit.snippets.kubernetes_pod_security_context\" }}"},{"line_number":26,"context_line":"return: |"},{"line_number":27,"context_line":"  securityContext:"},{"line_number":28,"context_line":"    runAsUser: 34356"},{"line_number":29,"context_line":"*/}}"},{"line_number":30,"context_line":""}],"source_content_type":"text/x-smarty","patch_set":3,"id":"3f79a3b5_04bdc2b0","line":27,"range":{"start_line":27,"start_character":0,"end_line":27,"end_character":18},"in_reply_to":"3f79a3b5_44e2da03","updated":"2018-11-09 21:37:01.000000000","message":"I think an appropriate way to handle this would be similar to how we handle tolerations and resources (https://github.com/openstack/openstack-helm-infra/blob/master/helm-toolkit/templates/snippets/_kubernetes_tolerations.tpl#L46)","commit_id":"5a32328edf6a5df4a6fc048d2b3c5cd63915ebb7"},{"author":{"_account_id":28701,"name":"Dustin Specker","email":"v-dspecker@microsoft.com","username":"dustinspecker"},"change_message_id":"33df96b9c76a497d8c15a483ad01d943133d93e9","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"3f79a3b5_ae29d639","updated":"2018-11-19 16:41:02.000000000","message":"nit: pod_security_context feels redundant - just security_context\n\nnit: this is a mixture of snake_case and camelCase. Do we want to stick to one?","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e14759c37529ca0ef196199efe4ee70813d6e56f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":4,"id":"3f79a3b5_690f3838","in_reply_to":"3f79a3b5_ae29d639","updated":"2018-11-19 18:10:10.000000000","message":"It is named pod_security_context in case we want a container_security_context later. \n\nThe naming of the tpl and the keys in the values.yaml are usually in snake_case, and the keys in kubernetes are using camelCase.  We can\u0027t change the kubernetes keys (e.g. securityContext). To make things wholey consistent, we would need to rename keys and files in helm -- which would likely require a separate PS.","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":28701,"name":"Dustin Specker","email":"v-dspecker@microsoft.com","username":"dustinspecker"},"change_message_id":"33df96b9c76a497d8c15a483ad01d943133d93e9","unresolved":false,"context_lines":[{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  pod:"},{"line_number":22,"context_line":"    user:"},{"line_number":23,"context_line":"      myApp: 34356"},{"line_number":24,"context_line":"    pod_security_context:"},{"line_number":25,"context_line":"      seLinuxOptions:"},{"line_number":26,"context_line":"        level: \"s0:c123,c456\""}],"source_content_type":"text/x-smarty","patch_set":4,"id":"3f79a3b5_8eb41af6","line":23,"updated":"2018-11-19 16:41:02.000000000","message":"I think this example should be `myApp: {uid: 34356}` based off the usage below","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e14759c37529ca0ef196199efe4ee70813d6e56f","unresolved":false,"context_lines":[{"line_number":20,"context_line":"values: |"},{"line_number":21,"context_line":"  pod:"},{"line_number":22,"context_line":"    user:"},{"line_number":23,"context_line":"      myApp: 34356"},{"line_number":24,"context_line":"    pod_security_context:"},{"line_number":25,"context_line":"      seLinuxOptions:"},{"line_number":26,"context_line":"        level: \"s0:c123,c456\""}],"source_content_type":"text/x-smarty","patch_set":4,"id":"3f79a3b5_a92c70b1","line":23,"in_reply_to":"3f79a3b5_8eb41af6","updated":"2018-11-19 18:10:10.000000000","message":"good catch - fixed the sample","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":28701,"name":"Dustin Specker","email":"v-dspecker@microsoft.com","username":"dustinspecker"},"change_message_id":"33df96b9c76a497d8c15a483ad01d943133d93e9","unresolved":false,"context_lines":[{"line_number":37,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":38,"context_line":"{{- $application :\u003d index . \"application\" -}}"},{"line_number":39,"context_line":"securityContext:"},{"line_number":40,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":41,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":42,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":43,"context_line":"{{- end }}"}],"source_content_type":"text/x-smarty","patch_set":4,"id":"3f79a3b5_0ec80a74","line":40,"updated":"2018-11-19 16:41:02.000000000","message":"question: Should this have a default? Any reason we\u0027d want to supply security context but not a user id?","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"e14759c37529ca0ef196199efe4ee70813d6e56f","unresolved":false,"context_lines":[{"line_number":37,"context_line":"{{- $envAll :\u003d index . \"envAll\" -}}"},{"line_number":38,"context_line":"{{- $application :\u003d index . \"application\" -}}"},{"line_number":39,"context_line":"securityContext:"},{"line_number":40,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":41,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":42,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":43,"context_line":"{{- end }}"}],"source_content_type":"text/x-smarty","patch_set":4,"id":"3f79a3b5_a915504d","line":40,"in_reply_to":"3f79a3b5_0ec80a74","updated":"2018-11-19 18:10:10.000000000","message":"Don\u0027t think we want a default as this will force people to use this to always specify a UID, else they get a rendering problem.","commit_id":"c0c4d1f4ee83028842fed679be591c0245f57a18"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"fe0e3ed36a25323d74ce82301fdf2fb5497c3be7","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    user:"},{"line_number":23,"context_line":"      myApp:"},{"line_number":24,"context_line":"        uid: 34356"},{"line_number":25,"context_line":"    pod_security_context:"},{"line_number":26,"context_line":"      seLinuxOptions:"},{"line_number":27,"context_line":"        level: \"s0:c123,c456\""},{"line_number":28,"context_line":"usage: |"},{"line_number":29,"context_line":"  {{ dict \"envAll\" . \"application\" \"myApp\" | include \"helm-toolkit.snippets.kubernetes_pod_security_context\" }}"},{"line_number":30,"context_line":"return: |"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_ac973b37","line":27,"range":{"start_line":25,"start_character":0,"end_line":27,"end_character":29},"updated":"2018-12-07 22:31:19.000000000","message":"should this not be:\n```\n    pod_security_context:\n      myApp:\n        seLinuxOptions:\n          level: \"s0:c123,c456\"\n```\nso we can target these more granularly?","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"3b092fb854c599e3bc75bed97313fb6bce99be56","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    user:"},{"line_number":23,"context_line":"      myApp:"},{"line_number":24,"context_line":"        uid: 34356"},{"line_number":25,"context_line":"    pod_security_context:"},{"line_number":26,"context_line":"      seLinuxOptions:"},{"line_number":27,"context_line":"        level: \"s0:c123,c456\""},{"line_number":28,"context_line":"usage: |"},{"line_number":29,"context_line":"  {{ dict \"envAll\" . \"application\" \"myApp\" | include \"helm-toolkit.snippets.kubernetes_pod_security_context\" }}"},{"line_number":30,"context_line":"return: |"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_66035365","line":27,"range":{"start_line":25,"start_character":0,"end_line":27,"end_character":29},"in_reply_to":"3f79a3b5_ac973b37","updated":"2018-12-11 03:58:51.000000000","message":"Done","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"fe0e3ed36a25323d74ce82301fdf2fb5497c3be7","unresolved":false,"context_lines":[{"line_number":39,"context_line":"{{- $application :\u003d index . \"application\" -}}"},{"line_number":40,"context_line":"securityContext:"},{"line_number":41,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":42,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":43,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":44,"context_line":"{{- end }}"},{"line_number":45,"context_line":"{{- end -}}"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_4cbb07be","line":42,"range":{"start_line":42,"start_character":0,"end_line":42,"end_character":58},"updated":"2018-12-07 22:31:19.000000000","message":"if we did the above, this would be:\n\n```\n{{- if hasKey $envAll.Values.pod $application \"pod_security_context\" }}\n```","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"3b092fb854c599e3bc75bed97313fb6bce99be56","unresolved":false,"context_lines":[{"line_number":39,"context_line":"{{- $application :\u003d index . \"application\" -}}"},{"line_number":40,"context_line":"securityContext:"},{"line_number":41,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":42,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":43,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":44,"context_line":"{{- end }}"},{"line_number":45,"context_line":"{{- end -}}"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_8606af72","line":42,"range":{"start_line":42,"start_character":0,"end_line":42,"end_character":58},"in_reply_to":"3f79a3b5_4cbb07be","updated":"2018-12-11 03:58:51.000000000","message":"Done","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"},{"author":{"_account_id":23928,"name":"Pete Birley","email":"petebirley@gmail.com","username":"portdirect"},"change_message_id":"fe0e3ed36a25323d74ce82301fdf2fb5497c3be7","unresolved":false,"context_lines":[{"line_number":40,"context_line":"securityContext:"},{"line_number":41,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":42,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":43,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":44,"context_line":"{{- end }}"},{"line_number":45,"context_line":"{{- end -}}"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_2cda4b1b","line":43,"range":{"start_line":43,"start_character":0,"end_line":43,"end_character":63},"updated":"2018-12-07 22:31:19.000000000","message":"if we did the above, this would be:\n\n```\n{{ toYaml (index $envAll.Values.pod $application \"pod_security_context\") | indent 2 }}\n```","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"},{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"3b092fb854c599e3bc75bed97313fb6bce99be56","unresolved":false,"context_lines":[{"line_number":40,"context_line":"securityContext:"},{"line_number":41,"context_line":"  runAsUser: {{ index $envAll.Values.pod.user $application \"uid\" }}"},{"line_number":42,"context_line":"{{- if hasKey $envAll.Values.pod \"pod_security_context\" }}"},{"line_number":43,"context_line":"{{ toYaml $envAll.Values.pod.pod_security_context | indent 2 }}"},{"line_number":44,"context_line":"{{- end }}"},{"line_number":45,"context_line":"{{- end -}}"}],"source_content_type":"text/x-smarty","patch_set":7,"id":"3f79a3b5_461c17c2","line":43,"range":{"start_line":43,"start_character":0,"end_line":43,"end_character":63},"in_reply_to":"3f79a3b5_2cda4b1b","updated":"2018-12-11 03:58:51.000000000","message":"Done","commit_id":"a3a2723c98b052ccf6876091f23d155bf0b742be"}]}